OpenClaw's Slack reaction/pin sender-policy consistency issue in non-message ingress
Summary
OpenClaw Slack monitor handled reaction_* and pin_* non-message events before applying sender-policy checks consistently.
In affected versions, these events could be added to system-event context even when sender policy would not normally allow them.
Affected Packages / Versions
- Package: npm
openclaw - Latest published affected version confirmed:
2026.2.24(npm latest as of February 26, 2026) - Affected range:
<= 2026.2.24 - Patched version :
2026.2.25
Technical Details
reaction_*andpin_*handlers now route through shared sender authorization (authorizeSlackSystemEventSender).- Enforced checks now include:
- DM
dmPolicy/allowFrom - channel
usersallowlist enforcement for non-DM channels - channel-level allow checks before system-event enqueue
- DM
- Regression coverage added for DM allow/deny and channel-user allowlist deny paths.
Fix Commit(s)
aedf62ac7e669a89c7b299201bf6537dc6b12e0e75dfb71e4e8b7c2feba5a8ca662f92ea840e0147
Impact
Low-severity policy-consistency issue in Slack non-message event ingress. This may introduce unexpected reaction/pin context signals from senders outside configured policy.
Release Process Note
patched_versions is pre-set to planned release 2026.2.25. Advisory published with npm release 2026.2.25.
OpenClaw thanks @tdjackey for reporting.
Affected software
Click a technology to see all vulnerabilities affecting it.
| Platform | Package | Vulnerable versions | Fixed in |
|---|---|---|---|
| npm package | openclaw | < 2026.2.25 | 2026.2.25 |
References
- https://github.com/openclaw/openclaw/security/advisories/GHSA-rm2p-j3r7-4x4j
- https://nvd.nist.gov/vuln/detail/CVE-2026-32899
- https://github.com/openclaw/openclaw/commit/75dfb71e4e8b7c2feba5a8ca662f92ea840e0147
- https://github.com/openclaw/openclaw/commit/aedf62ac7e669a89c7b299201bf6537dc6b12e0e
- https://github.com/openclaw/openclaw
- https://www.vulncheck.com/advisories/openclaw-sender-policy-bypass-in-slack-reaction-and-pin-event-handlers
- CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N- Weakness (CWE)
CWE-863- Platform
- npm
- Package
openclaw- Disclosed
- 03.03.2026
- Updated
- 11.10.2026 10:22
Sources and licenses
OSV / GitHub Advisory Database - GHSA-rm2p-j3r7-4x4j - CC BY 4.0
Vulnerability history: openclaw
All published vulnerabilities of this package (npm package), newest first. Shows whether this is a one-off slip or a package that needs watching.
- Total entries
- 588
- First → latest
- 02.2026 07.2026
- Without a fix
- 9
- Exploited in attacks
- 0
Severity breakdown
- Critical 20
- High 215
- Medium 299
- Low 54
Disclosures per year
- 2026: 588
-
OpenClaw's Slack reaction/pin sender-policy consistency issue in non-message ingress this entry
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.