Openclaw cli: OpenClaw: BlueBubbles (optional plugin) pairing/allowlist mismatch when allowFrom is empty (CVE-2026-22170)

The BlueBubbles plugin for OpenClaw CLI had a vulnerability (CVE-2026-22170) where, if the dmPolicy was set to pairing or allowlist and the allowFrom list was empty or unset, the authorization function incorrectly allowed unknown senders to bypass access controls. This occurred because the shared allowlist helper function returned true for empty allowlists, effectively granting access to unauthorized senders. The vulnerability affects openclaw npm package versions up to and including 2026.2.21-2 and was fixed in version 2026.2.22 by modifying the allowlist helper to fail closed on empty lists and refactoring gating logic to unify message and reaction authorization.

The vulnerability allows unauthorized senders to bypass intended access controls in BlueBubbles direct messaging when the allowFrom list is empty, potentially permitting unwanted messages or reactions. The practical risk is generally low in typical personal or self-hosted setups where BlueBubbles identities are owner-controlled and not publicly reachable. However, risk increases in deployments with publicly reachable identifiers or broad agent tool permissions. The issue does not affect core messaging surfaces but only the optional BlueBubbles plugin.

A patch is available in openclaw version 2026.2.22 that fixes the issue by making the allowlist helper fail closed on empty allowlists and refactoring gating logic. Users should upgrade to version 2026.2.22 or later to remediate this vulnerability. No additional mitigation actions are required if the patch is applied.