Executive brief
OpenClaw, a library used for Microsoft Teams integrations, contains a flaw in how it handles session feedback. Unauthorized users can bypass security filters to submit feedback or trigger data reflections that should be restricted to authorized group members. This could lead to the recording of fraudulent feedback or unauthorized interactions within Teams sessions.
Technical details
An authentication bypass and incorrect authorization vulnerability (CWE-288, CWE-863) exists in OpenClaw versions up to 2026.3.24. The Microsoft Teams feedback invocation mechanism failed to apply the same sender authorization checks used for direct messages (DM) and group interactions. A remote attacker can bypass sender allowlists to record unauthorized session feedback or trigger reflection. The issue was addressed in version 2026.3.25 (and later 2026.3.28) by applying consistent DM and group authorization checks to feedback invokes.
Affected products
- OpenClaw openclaw <= 2026.3.24
Timeline
- 2026-03-26: disclosed: Initial disclosure in repository
- 2026-03-29: advisory: GitHub Advisory published
- 2026-03-25: patched: Fix commit applied to main branch