CVE-2026-100575

HighCVSS 8.8

Published: 26/09/2026(UTC)Updated: 08/10/2026(UTC)Translated: 26/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

16th percentile - higher than 16% of all known CVEs

Summary

OpenClaw Slack before 2026.8.1 fails to properly enforce sender allowlists in multi-person direct messages. Disallowed participants can trigger Slack agents and access tools and data granted to those agents by bypassing configured sender policies. The issue is fixed in 2026.8.1.

Risk Assessment

Unauthorized users can interact with Slack agents and access data and tools they should not have access to. This may lead to information leakage or unauthorized actions.

Recommendation

Update OpenClaw Slack to version 2026.8.1 or later. Until then, consider disabling Slack agents in multi-person direct message contexts or tightening sender policies.

Other vulnerabilities in OpenClaw Slack

CVE-2026-100531Medium
The @openclaw/slack npm package before 2026.8.1 contains an authorization flaw in its Slack download-file handler: when a file lacks the share metadata used to prove it belongs to the requested conversation, the conversation-authorization check fails open. An authenticated caller restricted to a single conversation who knows or obtains a file identifier can therefore download file contents from outside that conversation's scope, disclosing data across configured conversation boundaries.

Original NVD description (English source)

OpenClaw Slack versions before 2026.8.1 fail to properly enforce sender allowlists in multi-person direct messages. Disallowed participants can trigger Slack agents and access tools and data granted to those agents by bypassing configured sender policies.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS