Openclaw cli: OpenClaw's Zalouser allowlist authorization matched mutable group names by default (CVE-2026-32975)

OpenClaw's Zalouser allowlist mode accepted mutable group names and normalized slugs as authorization matches instead of requiring stable group IDs. This flaw allowed an attacker to reuse the same display name as an allowlisted group to bypass authorization checks in deployments using name-based `channels.zalouser.groups` entries with permissive sender allowlists. The vulnerability weakens channel authorization for Zalouser group routing, potentially allowing messages from unintended groups to reach the agent. The vulnerability affects openclaw versions from 2026.1.29 up to but not including 2026.3.12. The issue is fixed in openclaw 2026.3.12 by matching allowlist authorization against stable group identifiers.

The vulnerability weakens channel authorization by allowing messages from unintended groups to be accepted if they share the same display name as an allowlisted group. This could lead to unauthorized message routing within the Zalouser group system, potentially causing unauthorized access or message delivery to agents relying on group name-based authorization.

A patch is available and should be applied. Users should update openclaw to version 2026.3.12 or later, where allowlist authorization matches stable group identifiers instead of mutable group names. This update fully mitigates the vulnerability.