Skip to content
OpenAdvisories

Product · OpenClaw

slack

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-100531

    openclaw Slack before 2026.8.1 Authorization Bypass

    The @openclaw/slack npm package before 2026.8.1 contains an authorization flaw in its Slack download-file handler: when a file lacks the share metadata used to prove it belongs to the requested conversation, the conversation-authorization check fails open. An…

    OpenClaw slack