Executive brief
OpenClaw, an automation tool, contains a vulnerability in its Synology Chat extension where message replies could be misdirected. Because the system identifies users by their changeable usernames rather than permanent IDs, an attacker could potentially intercept communications intended for another user. This could lead to the exposure of sensitive chat data or unauthorized message delivery.
Technical details
A vulnerability in the Synology Chat extension of OpenClaw (npm package) allows for reply rebinding due to improper user resolution. The `webhook-handler.ts` component incorrectly resolved users based on mutable usernames instead of stable numeric `user_id` values provided by webhook events. An attacker with low privileges could exploit this by changing a username to match a target, potentially intercepting or redirecting chat replies. The issue is fixed in version 2026.3.22 by ensuring replies remain bound to stable identifiers unless a dangerous opt-in is explicitly enabled in the configuration.
Affected products
- OpenClaw openclaw < 2026.3.22
Timeline
- 2026-03-24: patched: Fix released in version 2026.3.22
- 2026-03-26: advisory: GitHub Advisory published
- 2026-04-10: disclosed: NVD publication date