CVE-2026-26328: OpenClaw iMessage group allowlist authorization bypass via DM pairing store

CVE-2026-26328 · Severity: low · CVSS 3.1 · Published 2026-02-18

OpenClaw is a Node.js library for managing iMessage bot integrations and command authorization. A flaw in group allowlist authorization logic allows senders who are approved in direct message (DM) pairing to bypass group-level authorization controls, potentially enabling unauthorized command execution in group chats that should restrict those senders.

Technologies: clawdbot (npm), Openclaw. Vendors: npm, Openclaw.

Quick answers

Is CVE-2026-26328 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-26328 being exploited in the wild.
How severe is CVE-2026-26328?
Low severity, with a CVSS score of 3.1, published 18 February 2026.
Which products and versions are affected?
clawdbot (npm) SEMVER:introduced=0,fixed=2026.2.14; Openclaw <= 2026.2.13.
Is there a fix for CVE-2026-26328?
Yes. clawdbot (npm): upgrade to 2026.2.14 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-26328 attacked?
It is attacked over the network, in a software library.
Am I affected by CVE-2026-26328?
Check whether you run clawdbot (npm) or Openclaw at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

  • clawdbot (npm): upgrade to 2026.2.14 or later
    npm install clawdbot@2026.2.14

Technical details

This is an authorization bypass vulnerability in the iMessage group allowlist enforcement (CWE-284, CWE-863). The vulnerable code in src/imessage/monitor/monitor-provider.ts derives effectiveGroupAllowFrom by combining both the static group allowlist and DM pairing-store identities (storeAllowFrom), causing identity checks meant for direct messages to leak into group chat authorization. An authenticated sender approved via DM pairing can satisfy group authorization even if not explicitly listed in groupAllowFrom, weakening the boundary between DM and group contexts. No user interaction or elevated privileges are required; the attacker only needs to be a previously-paired DM contact. Patches are available in openclaw >= 2026.2.14 and clawdbot >= 2026.2.14.

Affected products

  • OpenClaw openclaw <= 2026.2.13
  • OpenClaw clawdbot <= 2026.1.24-3

Identifiers

  • CVE-2026-26328
  • GHSA-g34w-4xqq-h79m

Timeline

  • 2026-02-18: disclosed: Advisory GHSA-g34w-4xqq-h79m published
  • 2026-02-18: patched: Fixes available in openclaw >= 2026.2.14 and clawdbot >= 2026.2.14

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.