Threats affecting pkg:npm/@openclaw/slack

The openclaw/slack npm package versions before 2026.8.1 contain an authorization bypass vulnerability in the Slack download-file handler. This flaw allows an authenticated user restricted to a single conversation to download files from other conversations if they know or obtain a file identifier, due to improper validation of file share metadata. The vulnerability does not allow listing of arbitrary files or bypass Slack authentication itself. The issue is fixed in version 2026.8.1.