https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 08:30:54 +0000 https://vulnerability.circl.lu/vuln/brew-openclaw-cli-cve-2026-32005 <p><strong>Affected:</strong> Homebrew: openclaw-cli</p> <p>## Impact</p> <p>In shared Slack workspace deployments that rely on sender restrictions (`allowFrom`, DM policy, or channel user allowlists), some interactive callbacks (`block_action`, `view_submission`, `view_closed`) could be accepted before full sender authorization checks.</p> <p>In that scenario, an unauthorized workspace member could enqueue system-event text into an active session. This issue did not provide unauthenticated access, cross-gateway isolation bypass, or host-level privilege escalation by itself.</p> <p>## Affected Packages / Versions</p> <p>- Package: `openclaw` (npm) - Vulnerable versions: `&lt;= 2026.2.24` - Patched version: `2026.2.25` (planned next npm release)</p> <p>## Fix Commit(s)</p> <p>- `ce8c67c314b93f570f53c2a9abc124e1e3a54715`</p> <p>## Release Process Note</p> <p>`patched_versions` is pre-set to the release (`2026.2.25`). Advisory published with npm release `2026.2.25`.</p> <p>## Trust Model Scope Note</p> <p>OpenClaw does not support adversarial multi-user isolation on a single shared gateway instance. The supported model is one trust boundary per gateway (separate gateways/hosts for mutually untrusted users). See: https://docs.openclaw.ai/gateway/security</p> <p>OpenClaw thanks @tdjackey for reporting.</p> <p><strong>Affected:</strong> Homebrew: openclaw-cli</p> <p>## Impact</p> <p>In shared Slack workspace deployments that rely on sender restrictions (`allowFrom`, DM policy, or channel user allowlists), some interactive callbacks (`block_action`, `view_submission`, `view_closed`) could be accepted before full sender authorization checks.</p> <p>In that scenario, an unauthorized workspace member could enqueue system-event text into an active session. This issue did not provide unauthenticated access, cross-gateway isolation bypass, or host-level privilege escalation by itself.</p> <p>## Affected Packages / Versions</p> <p>- Package: `openclaw` (npm) - Vulnerable versions: `&lt;= 2026.2.24` - Patched version: `2026.2.25` (planned next npm release)</p> <p>## Fix Commit(s)</p> <p>- `ce8c67c314b93f570f53c2a9abc124e1e3a54715`</p> <p>## Release Process Note</p> <p>`patched_versions` is pre-set to the release (`2026.2.25`). Advisory published with npm release `2026.2.25`.</p> <p>## Trust Model Scope Note</p> <p>OpenClaw does not support adversarial multi-user isolation on a single shared gateway instance. The supported model is one trust boundary per gateway (separate gateways/hosts for mutually untrusted users). See: https://docs.openclaw.ai/gateway/security</p> <p>OpenClaw thanks @tdjackey for reporting.</p> https://vulnerability.circl.lu/vuln/brew-openclaw-cli-cve-2026-32005 https://vulnerability.circl.lu/vuln/cve-2026-32005 <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw versions prior to 2026.2.25 fail to enforce sender authorization checks for interactive callbacks including block_action, view_submission, and view_closed in shared workspace deployments. Unauthorized workspace members can bypass allowFrom restrictions and channel user allowlists to enqueue system-event text into active sessions.</p> <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw versions prior to 2026.2.25 fail to enforce sender authorization checks for interactive callbacks including block_action, view_submission, and view_closed in shared workspace deployments. Unauthorized workspace members can bypass allowFrom restrictions and channel user allowlists to enqueue system-event text into active sessions.</p> https://vulnerability.circl.lu/vuln/cve-2026-32005