Executive brief
OpenClaw, a personal AI assistant platform, contains a vulnerability in its Synology Chat extension. When multiple accounts are configured, they may share the same webhook path, allowing one account to override the communication routes of another. This can lead to a bypass of privacy protections, potentially allowing unauthorized access to or interference with direct messages.
Technical details
An improper authorization vulnerability (CWE-285) exists in the Synology Chat extension of OpenClaw due to a webhook path collision. In multi-account configurations, the application failed to distinguish between inherited base webhook paths and explicit per-account paths, leading to route replacement where one account could take over the webhook route of another. This allows an attacker to bypass per-account Direct Message (DM) policy separation. The fix, introduced in version 2026.3.22, ensures that the gateway runtime fails closed on inherited or duplicate paths and registers routes without allowing replacement.
Affected products
- OpenClaw openclaw < 2026.3.22
Timeline
- 2026-03-24: disclosed: Advisory published by maintainer
- 2026-03-22: patched: Fix released in version 2026.3.22
- 2026-03-26: advisory: GitHub Advisory GHSA-rqp8-q22p-5j9q published