Executive brief
OpenClaw, a tool used for managing and monitoring Microsoft Teams communications, contains a security flaw where message filtering rules can be bypassed. When the system retrieves conversation history through the Microsoft Graph API, it fails to apply the 'sender allowlist' that normally restricts which messages are processed or displayed. This could allow unauthorized messages or content from restricted senders to be accessed or processed by the application, potentially leading to the exposure of sensitive communication data.
Technical details
A 'Confused Deputy' vulnerability (CWE-441) exists in OpenClaw's Microsoft Teams integration. The application fails to apply sender allowlist filtering when fetching thread history via the Microsoft Graph API, even though such restrictions are enforced for real-time message monitoring. An authenticated attacker with network access can exploit this to retrieve or process messages from senders who should be restricted by the configured allowlist. The root cause is a lack of authorization checks on the data returned from the Graph API thread history endpoint. The vulnerability is addressed in version 2026.3.31 by ensuring thread history is filtered against the sender allowlist.
Affected products
- OpenClaw OpenClaw < 2026.3.31
Timeline
- 2026-03-30: patched: Fix committed to repository
- 2026-03-31: advisory: Vendor advisory published via GitHub (GHSA-chfm-xgc4-47rj)
- 2026-04-28: disclosed: NVD publication date