GHSA-wm8r-w8pf-2v6w

Suggest an improvement
Source
https://github.com/advisories/GHSA-wm8r-w8pf-2v6w
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/03/GHSA-wm8r-w8pf-2v6w/GHSA-wm8r-w8pf-2v6w.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-wm8r-w8pf-2v6w
Aliases
Downstream
Published
2026-03-02T22:14:56Z
Modified
2026-03-20T22:00:05.487446Z
Severity
  • 3.7 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N CVSS Calculator
Summary
OpenClaw has Signal group allowlist authorization bypass via DM pairing-store leakage
Details

Summary

In OpenClaw 2026.2.25, Signal group authorization under groupPolicy=allowlist could accept sender identities sourced from DM pairing-store approvals. This allowed DM pairing approvals to leak into group allowlist evaluation.

Impact

This is an authorization-boundary weakness between DM pairing and group allowlist controls. A sender approved for DM pairing could pass group checks without explicit group allowlisting.

Affected Packages / Versions

  • Package: openclaw (npm)
  • Latest published version affected: 2026.2.25
  • Vulnerable range: <= 2026.2.25
  • Patched version (planned next release): >= 2026.2.26

Fix

OpenClaw now keeps DM pairing-store entries DM-only and enforces explicit group allowlist boundaries in shared DM/group policy resolution used by Signal and other channels.

Fix Commit(s)

  • 8bdda7a651c21e98faccdbbd73081e79cffe8be0
  • 64de4b6d6ae81e269ceb4ca16f53cda99ced967a

Release Process Note

patched_versions is pre-set to the planned next release (2026.2.26). After npm publish of that version, this advisory is ready to publish without further content edits.

Thanks @tdjackey for reporting.

Database specific 
{
    "github_reviewed": true,
    "github_reviewed_at": "2026-03-02T22:14:56Z",
    "cwe_ids": [
        "CWE-863"
    ],
    "severity": "LOW",
    "nvd_published_at": null
}
References

Affected packages

npm / openclaw

Package

Name
openclaw
View open source insights on deps.dev
Purl
pkg:npm/openclaw

Affected ranges

Type
SEMVER
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2026.2.26

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/03/GHSA-wm8r-w8pf-2v6w/GHSA-wm8r-w8pf-2v6w.json"