GHSA-gp79-m99v-gjmh: OpenClaw: Mattermost handlers could fall open when channel type was missing
Mattermost handlers in OpenClaw could improperly process events when the channel type metadata is missing, potentially bypassing direct message (DM) policy enforcement. This vulnerability affects versions prior to 2026.5.6. The issue arises only if the affected feature is enabled and reachable, with practical impact depending on operator configuration and input trust levels. The vulnerability does not alter the trusted-operator model of OpenClaw. Mitigations include restricting Mattermost bot access, reviewing channel metadata errors, narrowing allowlists, avoiding shared Gateways between untrusted users, and disabling the affected feature if not needed.
AI Analysis
Technical Summary
OpenClaw's Mattermost handlers may fail to enforce DM policy decisions when processing events that lack channel type metadata. This can cause the handlers to 'fall open,' allowing events that should be gated by channel policy to proceed unchecked. The vulnerability is scoped to the specific feature and configuration and does not affect the overall trusted-operator security model. The first stable patched version addressing this issue is 2026.5.6.
Potential Impact
If the vulnerable feature is enabled and accessible, an event missing channel type metadata could bypass intended DM policy enforcement, potentially allowing unauthorized event processing. The actual impact depends on the operator's configuration and whether untrusted input can reach the affected code path. There are no known exploits in the wild.
Mitigation Recommendations
A fix is available in version 2026.5.6. Until patched, restrict Mattermost bot access and monitor channel metadata errors. Additionally, narrow channel and tool allowlists, avoid sharing a Gateway between mutually untrusted users, and disable the affected feature if it is not required.
GHSA-gp79-m99v-gjmh: OpenClaw: Mattermost handlers could fall open when channel type was missing
Description
Mattermost handlers in OpenClaw could improperly process events when the channel type metadata is missing, potentially bypassing direct message (DM) policy enforcement. This vulnerability affects versions prior to 2026.5.6. The issue arises only if the affected feature is enabled and reachable, with practical impact depending on operator configuration and input trust levels. The vulnerability does not alter the trusted-operator model of OpenClaw. Mitigations include restricting Mattermost bot access, reviewing channel metadata errors, narrowing allowlists, avoiding shared Gateways between untrusted users, and disabling the affected feature if not needed.
CVSS v4.0
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
OpenClaw's Mattermost handlers may fail to enforce DM policy decisions when processing events that lack channel type metadata. This can cause the handlers to 'fall open,' allowing events that should be gated by channel policy to proceed unchecked. The vulnerability is scoped to the specific feature and configuration and does not affect the overall trusted-operator security model. The first stable patched version addressing this issue is 2026.5.6.
Potential Impact
If the vulnerable feature is enabled and accessible, an event missing channel type metadata could bypass intended DM policy enforcement, potentially allowing unauthorized event processing. The actual impact depends on the operator's configuration and whether untrusted input can reach the affected code path. There are no known exploits in the wild.
Mitigation Recommendations
A fix is available in version 2026.5.6. Until patched, restrict Mattermost bot access and monitor channel metadata errors. Additionally, narrow channel and tool allowlists, avoid sharing a Gateway between mutually untrusted users, and disable the affected feature if it is not required.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-gp79-m99v-gjmh
- Osv Schema Version
- 1.4.0
- Aliases
- []
- Ecosystems
- ["npm"]
- Database Specific Severity
- MODERATE
- Cvss Version
- 4.0
Threat ID: 6a46eccc27e9c7971943efbb
Added to database: 07/02/2026, 22:57:16 UTC
Last enriched: 07/02/2026, 23:20:27 UTC
Last updated: 07/02/2026, 23:20:27 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.