Threats affecting pkg:github/openclaw/slack

OpenClaw Slack versions before 2026.8.1 contain a vulnerability where sender allowlists are not properly enforced in multi-person direct messages. This allows unauthorized participants to trigger Slack agents and access tools and data intended only for authorized users. The vulnerability has a high severity score of 8.7 and requires privileged access to exploit.