CVE-2026-100582: OpenClaw Package Vulnerability in Channel Read Actions
Summary
CVE-2026-100582: OpenClaw: Channel read actions could skip target allowlists. Affects @openclaw/msteams versions < 2026.8.1. Fixed in 2026.8.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenClaw is an open-source framework that facilitates the integration of various messaging platforms, including Microsoft Teams, Feishu, Matrix, and Google Chat. It allows developers to create bots that can interact with users across these platforms. The framework is designed to manage channel interactions while maintaining security through operator-defined policies. However, a recent vulnerability has been identified that could allow unauthorized access to channel content.
Vulnerability Detail
The vulnerability arises from the way OpenClaw handles channel read actions. Specifically, it allows explicit read targets in messaging platforms to bypass configured allowlists, potentially exposing sensitive content or metadata from channels that should be restricted. This issue can be exploited by lower-trust senders or agents who have access to channel read actions, leading to unauthorized data retrieval. The vulnerability does not alter OpenClaw's trusted-operator model or introduce per-user isolation within a single Gateway, but it poses a risk depending on the permissions of the bot account involved.
How To Fix
Latest published version: 2026.10.6 as of 22 Oct 2026
npm install @openclaw/msteams@2026.10.6Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
2026.8.1
This is the first release that contains the fix.
npm install @openclaw/msteams@2026.8.1Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Before upgrading, it is advisable to disable explicit-target read actions or restrict the connected bot account to allowed channels at the platform level. This can be done by modifying the bot's permissions in the respective messaging platform settings.
Conclusion
The OpenClaw vulnerability (CVE-2026-100582) poses a risk by allowing unauthorized access to channel content through bypassing allowlists. It is crucial for users of the affected packages to upgrade to the patched version 2026.8.1 or implement workarounds to mitigate the risk. Regular monitoring for vulnerabilities using tools like Vulert can help maintain security.
See every vulnerability recorded for @openclaw/msteams →
FAQ
The vulnerability allows unauthorized access to channel content by bypassing configured allowlists for read actions.
The affected packages include @openclaw/msteams, @openclaw/feishu, @openclaw/matrix, and @openclaw/googlechat.
The vulnerability has a CVSS score of 6.5, indicating a moderate level of risk.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Visit Vulert Scanner to check your application without needing to sign up.
As a temporary measure, disable explicit-target read actions or limit the bot account's permissions to only allowed channels.
