Openclaw cli: OpenClaw: Slack system events bypass sender authorization in member and message subtype handlers (CVE-2026-32895)

The OpenClaw CLI package (npm) versions >=2026.1.29 and <2026.2.26 contain a vulnerability (CVE-2026-32895) where Slack system events of types member_* and message subtypes (message_changed, message_deleted, thread_broadcast) bypass sender authorization checks before enqueueing. The affected event handlers in src/slack/monitor/events/members.ts and src/slack/monitor/events/messages.ts performed channel checks but did not enforce shared sender authorization, allowing unauthorized system-event ingress in deployments using Slack DM allowlists or per-channel user allowlists. The fix, committed in 3d30ba18a2aba1e1b302e77ff33145c3b06c01c8 and planned for release in version 2026.2.26, routes these handlers through authorizeAndResolveSlackSystemEventContext(...) to enforce sender identity resolution and fails closed if unresolved.

This vulnerability allows unauthorized senders to enqueue Slack system events in affected OpenClaw CLI deployments that rely on Slack DM or per-channel user allowlists for authorization. The impact is limited to unauthorized event ingress, potentially leading to unauthorized actions or event processing. The CVSS score is 5.4 (medium severity) with low complexity and no user interaction required, indicating a moderate risk of limited confidentiality and integrity impact without availability impact.

A patch is available in OpenClaw CLI version 2026.2.26 that enforces sender authorization for Slack system events and fails closed when sender identity cannot be resolved. Users should upgrade to version 2026.2.26 or later to remediate this vulnerability. No additional mitigation is required once patched.