Openclaw cli: OpenClaw: Slack reaction events could ignore reaction notification settings (CVE-2026-53851)

In OpenClaw CLI versions >=2026.1.29 and <2026.5.12, Slack reaction events could ignore reaction notification settings, allowing reaction events to enter the agent pipeline even when reaction notifications were disabled. This flaw is limited to the Slack reaction event feature and does not impact the overall trusted-operator model. The vulnerability could cause unintended processing of reaction events if the feature is enabled and reachable, with practical impact dependent on operator configuration and trust boundaries.

The vulnerability allows Slack reaction events to be processed by the agent pipeline despite reaction notifications being disabled. This could lead to unintended agent processing of reaction events. The actual impact depends on how the operator has configured the system and whether lower-trust inputs can reach the affected processing path. There is no impact on confidentiality or availability, only integrity is affected to a limited degree.

A patch is available in OpenClaw CLI version 2026.5.12. Operators should upgrade to this version to remediate the vulnerability. Until patched, it is recommended to disable or restrict Slack reaction event subscriptions if this feature is not needed. Additionally, operators should keep channel and tool allowlists narrow, avoid sharing one Gateway between mutually untrusted users, and disable the affected feature when not required.