Openclaw cli: OpenClaw has Signal group allowlist authorization bypass via DM pairing-store leakage (CVE-2026-31991)

In OpenClaw CLI version 2026.2.25 and earlier, Signal group authorization configured with groupPolicy=allowlist could be bypassed due to leakage of sender identities from DM pairing-store approvals into group allowlist evaluation. This vulnerability allows a sender approved for DM pairing to pass group allowlist checks without explicit group membership, representing an authorization boundary weakness between DM pairing and group allowlist controls. The vulnerability affects versions >=2026.1.29 and <2026.2.26. The fix, introduced in version 2026.2.26, ensures DM pairing-store entries are restricted to DM-only and enforces explicit group allowlist boundaries in the shared DM/group policy resolution.

The vulnerability allows an attacker who is approved for DM pairing to bypass Signal group allowlist authorization controls, potentially enabling unauthorized message sending within groups that enforce allowlist policies. The impact is limited to authorization bypass with low severity (CVSS 3.7), affecting confidentiality and integrity at a low level without availability impact. There are no known exploits in the wild.

A patch is available in OpenClaw CLI version 2026.2.26 that fixes the authorization bypass by isolating DM pairing-store entries and enforcing explicit group allowlist boundaries. Users should upgrade to version 2026.2.26 or later to remediate this vulnerability. No additional mitigation actions are required beyond applying the official fix.