Openclaw cli: OpenClaw has a Matrix allowlist bypass via displayName and cross-homeserver localpart matching (CVE-2026-28471)
Description
OpenClaw CLI versions from 2026.1.14-1 up to but not including 2026.2.2 have a vulnerability in the Matrix DM allowlist matching logic. The allowlist can be bypassed due to identity confusion caused by matching on attacker-controlled display names and localparts of Matrix IDs without homeserver parts. This allows a remote Matrix user to impersonate an allowed identity and bypass allowlist restrictions. The issue affects deployments with the optional Matrix plugin enabled. A fix is available in version 2026.2.2 and later.
CVSS v3.1
Score 6.5medium
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
OpenClaw CLI's Matrix DM allowlist matching in affected versions (>=2026.1.14-1 <2026.2.2) incorrectly matches allowlist entries against multiple sender-derived candidates, including the sender's display name and the localpart of the Matrix ID without the homeserver. Because display names are attacker-controlled and localparts are non-unique across homeservers, an attacker can impersonate an allowed identity if the allowlist contains display names or bare localparts. This bypasses the intended allowlist restrictions and allows unauthorized routing or agent pipeline access. The vulnerability is fixed in version 2026.2.2.
Potential Impact
The vulnerability causes Matrix DM allowlist identity confusion, enabling remote Matrix users to impersonate allowed identities if the allowlist is configured with display names or bare localparts. This may lead to unauthorized access to routing or agent pipelines depending on the deployment's Matrix channel policies and downstream capabilities. The CVSS score is 6.5 (medium severity) with low attack complexity and no privileges required.
Mitigation Recommendations
Upgrade OpenClaw CLI to version 2026.2.2 or later. Additionally, ensure that Matrix allowlists contain only full Matrix user IDs (MXIDs) in the format '@user:server' or use a wildcard '*'. Do not use display names or bare localparts in allowlists to prevent impersonation.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- BREW-openclaw-cli-CVE-2026-28471
- Osv Schema Version
- 1.7.3
- Ecosystems
- ["Homebrew"]
- Cvss Version
- 3.1
Threat ID: 6ac245c712601ec6a3167f00
Added to database: 10/04/2026, 12:25:43 UTC
Last enriched: 10/04/2026, 13:09:11 UTC
Last updated: 10/04/2026, 16:08:37 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.