AI agent vulnerability · OpenClaw

GHSA-qj22-xqjr-v83v: OpenClaw's Telegram message_reaction authorization bypass allows unauthorized system-event injection

highCVSS 4.0 7.1

A missing sender-authorization check in Telegram messagereaction handling allowed unauthorized users to trigger reaction-derived system events. Affected Packages / Versions - Package: openclaw (npm) - Introduced: 2026.2.17 - Affected: = 2026.2.17 and <= 2026.2.24 - Latest published at patch time: 2026.2.24 - Patched in release: 2026.2.25 Impact When reaction notifications are enabled, unauthorized Telegram senders…

Published Mar 3, 2026

Affected packages

openclaw

Ecosystem: npm
Affected: <= 2026.2.24
Fixed in: 2026.2.25
Check: npm ls openclaw

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

A missing sender-authorization check in Telegram message_reaction handling allowed unauthorized users to trigger reaction-derived system events.

Affected Packages / Versions

Package: openclaw (npm)
Introduced: 2026.2.17
Affected: >= 2026.2.17 and <= 2026.2.24
Latest published at patch time: 2026.2.24
Patched in release: 2026.2.25

Impact

When reaction notifications are enabled, unauthorized Telegram senders could inject reaction system events despite configured DM/group authorization controls (dmPolicy, allowFrom, groupPolicy, groupAllowFrom).

Fix Commit(s)

e56b0cf1a04f992ac6ebc775899f48ea31687640

Release Process Note

patched_versions is pre-set to the release (2026.2.25) so once npm release 2026.2.25 is published, this advisory can be published without further edits.

OpenClaw thanks @tdjackey for reporting.

Credited to tdjackey.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More OpenClaw vulnerabilities

All OpenClaw entries