Skip to content
OpenAdvisories

Product · OpenClaw

msteams

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-100582

    OpenClaw Channel Plugins before 2026.8.1 Channel Read Allowlist Bypass

    OpenClaw channel plugins (@openclaw/msteams, @openclaw/feishu, @openclaw/matrix, and @openclaw/googlechat) before 2026.8.1 do not enforce the configured channel read allowlist for caller-supplied explicit read targets in message, reaction, pin, member, and re…

    OpenClaw msteams feishu matrix npm
  • Medium 5.4
    CVE-2026-62224

    OpenClaw MS Teams < 2026.5.12 Authorization Bypass

    OpenClaw MS Teams before 2026.5.12 contain an authorization bypass vulnerability where the allowFrom feature binds to mutable display names. Attackers with lower-trust access can perform actions requiring stronger authorization by exploiting the mutable displ…

    OpenClaw msteams
  • Medium 6.5
    CVE-2026-62214

    OpenClaw < 2026.5.28 Bot Framework SSRF via serviceUrl Parameter Validation

    OpenClaw versions before 2026.5.28 Bot Framework contains an improper input validation vulnerability that allows lower-trust callers to expose bot tokens and credentials by failing to properly validate serviceUrl parameters. Attackers can supply malicious ser…

    OpenClaw msteams
  • Medium 6.5
    CVE-2026-62213

    OpenClaw < 2026.5.27 Token Leakage via MS Teams Outbound Requests

    OpenClaw versions before 2026.5.27 contain a token leakage vulnerability in MS Teams outbound requests that allows lower-trust callers to expose Bot Framework tokens. Attackers can access configured input paths to retrieve credentials that should remain withi…

    OpenClaw msteams