Openclaw cli: OpenClaw's Signal reaction-only status events could, in limited cases, be enqueued before access checks (CVE-2026-32050)

In OpenClaw CLI (npm package), versions up to 2026.2.24 contain a vulnerability where, in a specific Signal reaction-notification path, reaction-only inbound events could enqueue a status event prior to performing sender access authorization checks. This occurs in the event handler code, allowing unauthorized senders to add reaction status lines to agent context sessions without proper DM/group authorization. The flaw is limited to reaction-only inbound events and does not enable unauthorized direct message delivery or host command execution. The issue was resolved in version 2026.2.25 by applying shared DM/group access checks before enqueuing reaction notifications.

The vulnerability allows unauthorized senders to enqueue reaction status lines in affected sessions, potentially misleading the agent context with unauthorized reaction notifications. However, it does not permit unauthorized direct message delivery or execution of host commands. The impact is therefore limited to the integrity of reaction status events within the Signal protocol handling.

A patch is available in OpenClaw CLI version 2026.2.25 that fixes the issue by enforcing access checks before enqueuing reaction notifications. Users should upgrade to version 2026.2.25 or later to remediate this vulnerability.