Openclaw cli: OpenClaw: Discord DM reaction ingress missed dmPolicy/allowFrom checks in restricted setups (CVE-2026-32028)

OpenClaw CLI versions <= 2026.2.24 have an authorization inconsistency in the handling of Discord direct-message reaction notifications. While normal DM messages enforce dmPolicy and allowFrom authorization checks, reaction notifications did not consistently apply these checks, allowing unauthorized users to enqueue reaction-derived system events. This inconsistency affects only reaction ingress and does not directly execute commands. The patch in version 2026.2.25 aligns reaction ingress authorization with normal DM message authorization and applies similar hardening for Slack to maintain consistent channel behavior.

The vulnerability allows a non-allowlisted Discord user who can react to a bot-authored DM message to enqueue reaction-derived system events in the session despite restrictive DM policies. However, this does not directly lead to command execution. The practical impact depends on downstream automation or tool policies that process these reaction events. The CVSS score is 3.7 (low severity), reflecting limited impact on confidentiality and availability, with low integrity impact.

A patch is available in OpenClaw CLI version 2026.2.25 and later. Users should upgrade to this version or newer to ensure reaction ingress authorization checks are properly enforced. No additional mitigation actions are required beyond applying the official fix.