# CVE-2026-26328: OpenClaw iMessage group allowlist authorization bypass via DM pairing store

Source: https://junglewise.ai/threats/cve-2026-26328-openclaw-imessage-group-allowlist-authorization-bypass-via-dm  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-02-18. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2026-26328 · Severity: low · CVSS 3.1 · Published 2026-02-18

OpenClaw is a Node.js library for managing iMessage bot integrations and command authorization. A flaw in group allowlist authorization logic allows senders who are approved in direct message (DM) pairing to bypass group-level authorization controls, potentially enabling unauthorized command execution in group chats that should restrict those senders.

Technologies: [clawdbot (npm)](https://junglewise.ai/threats/technologies/clawdbot), [Openclaw](https://junglewise.ai/threats/technologies/openclaw). Vendors: [npm](https://junglewise.ai/threats/vendors/npm), [Openclaw](https://junglewise.ai/threats/vendors/openclaw).

## Quick answers

**Is CVE-2026-26328 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-26328 being exploited in the wild.

**How severe is CVE-2026-26328?** Low severity, with a CVSS score of 3.1, published 18 February 2026.

**Which products and versions are affected?** clawdbot (npm) SEMVER:introduced=0,fixed=2026.2.14; Openclaw <= 2026.2.13.

**Is there a fix for CVE-2026-26328?** Yes. clawdbot (npm): upgrade to 2026.2.14 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-26328 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-26328?** Check whether you run clawdbot (npm) or Openclaw at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- clawdbot (npm): upgrade to 2026.2.14 or later

  ```sh
  npm install clawdbot@2026.2.14
  ```


## Technical details

This is an authorization bypass vulnerability in the iMessage group allowlist enforcement (CWE-284, CWE-863). The vulnerable code in src/imessage/monitor/monitor-provider.ts derives effectiveGroupAllowFrom by combining both the static group allowlist and DM pairing-store identities (storeAllowFrom), causing identity checks meant for direct messages to leak into group chat authorization. An authenticated sender approved via DM pairing can satisfy group authorization even if not explicitly listed in groupAllowFrom, weakening the boundary between DM and group contexts. No user interaction or elevated privileges are required; the attacker only needs to be a previously-paired DM contact. Patches are available in openclaw >= 2026.2.14 and clawdbot >= 2026.2.14.

## Affected products

- OpenClaw openclaw <= 2026.2.13
- OpenClaw clawdbot <= 2026.1.24-3

## Identifiers

- CVE-2026-26328
- GHSA-g34w-4xqq-h79m

## Timeline

- 2026-02-18: disclosed: Advisory GHSA-g34w-4xqq-h79m published
- 2026-02-18: patched: Fixes available in openclaw >= 2026.2.14 and clawdbot >= 2026.2.14

## References

- [https://github.com/openclaw/openclaw/security/advisories/GHSA-g34w-4xqq-h79m](https://github.com/openclaw/openclaw/security/advisories/GHSA-g34w-4xqq-h79m)

## Related threats

- [OpenClaw incorrect authorization in mcp.app.view method](https://junglewise.ai/threats/cve-2026-102807-openclaw-before-2026-9-4-contains-an-incorrect-authorization)
- [OpenClaw incorrect authorization in Gateway media root allowlist](https://junglewise.ai/threats/cve-2026-102806-openclaw-before-2026-9-5-contains-an-incorrect-authorization)
- [OpenClaw exec approval bypass in Google Meet node commands](https://junglewise.ai/threats/cve-2026-100599-openclaw-versions-2026-5-1-through-2026-7-0-fail-to-apply-the)
- [OpenClaw Signal approval reaction binding logic error](https://junglewise.ai/threats/cve-2026-100598-openclaw-npm-package-openclaw-before-2026-7-1-incorrectly-binds)
- [OpenClaw time-of-check time-of-use race condition in filesystem operations](https://junglewise.ai/threats/cve-2026-100597-openclaw-npm-package-openclaw-before-2026-7-1-is-vulnerable-to-a)