CVE-2026-24764: OpenClaw Remote Code Execution via System Prompt Injection in Slack Channel Descriptions
Summary
CVE-2026-24764: OpenClaw Affected by Remote Code Execution via System Prompt Injection in Slack Channel Descriptions. Affects openclaw versions < 2026.2.3. Fixed in 2026.2.3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenClaw is an open-source package designed to integrate with various platforms, including Slack, to enhance communication and automation. It leverages large language models (LLMs) to process user inputs and generate responses. However, its integration with Slack exposes it to potential security vulnerabilities, particularly when untrusted metadata is incorporated into system prompts.
Vulnerability Detail
The vulnerability arises from the way OpenClaw handles Slack channel metadata, specifically the topic and description fields. When the Slack integration is enabled, this untrusted metadata can be incorporated into the model's system prompt, increasing the risk of prompt injection attacks. Such attacks can lead to unintended tool invocations or data exposure, especially in deployments where tool execution is enabled. The issue is particularly concerning as it allows malicious users to exploit the system by injecting harmful commands through seemingly benign Slack channel descriptions.
How To Fix
Latest published version: 2026.10.6 as of 22 Oct 2026
npm install openclaw@2026.10.6Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
2026.2.3
This is the first release that contains the fix.
npm install openclaw@2026.2.3Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If you do not use Slack, no action is required. However, if you do use Slack and cannot upgrade immediately, consider disabling the Slack integration until you can apply the patch.
Conclusion
In summary, CVE-2026-24764 poses a significant risk to OpenClaw users who have enabled Slack integration. It is crucial to upgrade to the patched version to safeguard against potential prompt injection attacks. Users who cannot upgrade should consider disabling the integration temporarily.
See every vulnerability recorded for openclaw →
FAQ
CVE-2026-24764 is a vulnerability in the OpenClaw package that allows for remote code execution through system prompt injection via Slack channel descriptions.
If your application uses OpenClaw with Slack integration, it may be susceptible to prompt injection attacks, potentially leading to unauthorized tool executions or data exposure.
If upgrading is not possible, consider disabling the Slack integration as a temporary measure to mitigate the risk.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
The CVSS score for this vulnerability is 3.7, indicating a low severity level.
References
Related vulnerabilities
Recent vulnerabilities recorded for openclaw.
