Skip to content
OpenAdvisories

Product · OpenClaw

slack

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-100575

    OpenClaw Slack before 2026.8.1 Authentication Bypass via Group DM

    OpenClaw Slack versions before 2026.8.1 fail to properly enforce sender allowlists in multi-person direct messages. Disallowed participants can trigger Slack agents and access tools and data granted to those agents by bypassing configured sender policies.

    OpenClaw slack