Vibe Security Radar
← Back to Vulnerability Database

GHSA-8m9v-xpgf-g99m

LOWCVSS 2.5
Published: Mar 2, 2026Verified by: gemini-3.1-flash-lite-preview
Description

OpenClaw has an unauthorized sender bypass in its stop triggers and /models command authorization

How AI Introduced This

The application failed to properly validate authorization for specific message contexts (such as DM topics), allowing unauthorized users to trigger restricted commands or actions.

Causality Analysis

CONFIRMED2267d58afcc7
Vulnerability
Authorization Bypass
Root Cause
The application failed to properly validate authorization for specific message contexts (such as DM topics), allowing unauthorized users to trigger restricted commands or actions.
Pattern
Lack of topic-aware authorization checks when processing inbound messages, commands, or callbacks in Telegram DM sessions.
Causal Chain
The initial implementation in the blamed commit only checked group-specific allowlists (groupConfig.allowFrom) and lacked a fallback to global sender allowlist configurations, allowing unauthorized senders to bypass restrictions when no group-specific policy was defined.
Reasoning
The blamed commit introduced the initial implementation of the Feishu bot handler, including the logic for sender-level allowlist checks. By failing to account for global sender allowlist configurations and only checking per-group settings, it created the authorization bypass vulnerability addressed in the fix.

Verified by gemini-3.1-flash-lite-preview

AI Signal Details

AI Signals in 2267d58
Claude CodeCo-author trailerCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>95%

Bug-Introducing Commits(1)

feat(feishu): replace built-in SDK with community plugin

Yifeng WangFeb 5, 2026extensions/feishu/src/bot.tsBlame: 90%

Fix Commits(7)

c13b35bopenclaw/openclaw/c13b35badvisory_version
8247c25openclaw/openclaw/8247c25advisory_version
53d10f8openclaw/openclaw/53d10f8advisory_version
50e2674openclaw/openclaw/50e2674advisory_version
3a93a7bopenclaw/openclaw/3a93a7badvisory_version
107be4eopenclaw/openclaw/107be4eadvisory_version
aae90cbopenclaw/openclaw/aae90cbadvisory_version
References