Threats affecting pkg:npm/@openclaw/msteams

OpenClaw channel plugins prior to version 2026.8.1 do not enforce the configured channel read allowlist for certain read actions, allowing lower-trust senders or agents to access content or metadata from channels excluded by the operator's read policy. This vulnerability affects @openclaw/msteams and related plugins and is fixed in version 2026.8.1.