OpenClaw versions up to 2026.4.1 have a vulnerability where Slack thread context fetched via the API was not properly filtered by the sender allowlist. This allowed messages from non-allowlisted senders to be included in the agent context if an allowlisted user replied in the same thread. The issue is fixed in version 2026.4.2.