Threats tagged 'ghsa-p6pm-6pmc-m53c'

OpenClaw Slack versions before 2026.8.1 contain a vulnerability where sender allowlists are not properly enforced in multi-person direct messages. This allows unauthorized participants to trigger Slack agents and access tools and data intended only for authorized users. The vulnerability has a high severity score of 8.7 and requires privileged access to exploit.