GHSA-wv26-j37q-2g7p: OpenClaw's Slack plugin approvals used the exec approver gate for plugin actions
OpenClaw's Slack plugin approvals used the exec approver gate for plugin actions, allowing Slack users authorized only for exec approvals to resolve plugin approvals improperly. This vulnerability affects versions prior to 2026.5.12. The issue could lead to plugin actions being approved outside the intended approval split, depending on operator configuration and input trust levels. The vulnerability is mitigated by patching to version 2026.5.12 or later and by manual review of Slack approval actions until patched. Additional mitigations include maintaining narrow allowlists and disabling the affected feature when not needed.
AI Analysis
Technical Summary
In OpenClaw versions before 2026.5.12, the Slack plugin approval process incorrectly used the exec approver gate for plugin actions. This allowed Slack users with exec approval permissions to resolve plugin approvals that should have required different or additional approval steps. The vulnerability does not alter OpenClaw's trusted-operator model but can result in plugin actions being approved outside the intended approval split. The practical impact depends on the operator's configuration and whether lower-trust inputs can reach the affected approval path. The issue is addressed in version 2026.5.12.
Potential Impact
A Slack user authorized only for exec approvals could improperly approve plugin actions, potentially bypassing intended approval controls. This could lead to plugin actions being executed without the intended multi-approval or policy enforcement. The actual impact depends on how the operator has configured approval allowlists and the trust level of inputs reaching the approval process.
Mitigation Recommendations
A fix is available in OpenClaw version 2026.5.12. Operators should upgrade to this version to remediate the vulnerability. Until patched, manual review of Slack approval actions is recommended. Additionally, maintain narrow channel and tool allowlists, avoid sharing a Gateway between mutually untrusted users, and disable the affected Slack plugin approval feature when it is not needed.
GHSA-wv26-j37q-2g7p: OpenClaw's Slack plugin approvals used the exec approver gate for plugin actions
Description
OpenClaw's Slack plugin approvals used the exec approver gate for plugin actions, allowing Slack users authorized only for exec approvals to resolve plugin approvals improperly. This vulnerability affects versions prior to 2026.5.12. The issue could lead to plugin actions being approved outside the intended approval split, depending on operator configuration and input trust levels. The vulnerability is mitigated by patching to version 2026.5.12 or later and by manual review of Slack approval actions until patched. Additional mitigations include maintaining narrow allowlists and disabling the affected feature when not needed.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
In OpenClaw versions before 2026.5.12, the Slack plugin approval process incorrectly used the exec approver gate for plugin actions. This allowed Slack users with exec approval permissions to resolve plugin approvals that should have required different or additional approval steps. The vulnerability does not alter OpenClaw's trusted-operator model but can result in plugin actions being approved outside the intended approval split. The practical impact depends on the operator's configuration and whether lower-trust inputs can reach the affected approval path. The issue is addressed in version 2026.5.12.
Potential Impact
A Slack user authorized only for exec approvals could improperly approve plugin actions, potentially bypassing intended approval controls. This could lead to plugin actions being executed without the intended multi-approval or policy enforcement. The actual impact depends on how the operator has configured approval allowlists and the trust level of inputs reaching the approval process.
Mitigation Recommendations
A fix is available in OpenClaw version 2026.5.12. Operators should upgrade to this version to remediate the vulnerability. Until patched, manual review of Slack approval actions is recommended. Additionally, maintain narrow channel and tool allowlists, avoid sharing a Gateway between mutually untrusted users, and disable the affected Slack plugin approval feature when it is not needed.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-wv26-j37q-2g7p
- Osv Schema Version
- 1.4.0
- Aliases
- []
- Ecosystems
- ["npm"]
- Database Specific Severity
- MODERATE
- Cvss Version
- null
Threat ID: 6a46ecd027e9c7971943f180
Added to database: 07/02/2026, 22:57:20 UTC
Last enriched: 07/02/2026, 23:21:02 UTC
Last updated: 07/03/2026, 03:23:14 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.