Executive brief
OpenClaw is an AI automation platform that integrates with Mattermost to execute commands via slash tokens. When a Mattermost token is revoked, there is a window of time until OpenClaw's monitor refreshes during which the old token continues to be accepted, allowing unauthorized command execution. The practical risk depends on how the system is configured and whether untrusted users can send requests to the affected slash command interface.
Technical details
This is an authorization bypass vulnerability (CWE-613) in OpenClaw's handling of Mattermost slash token revocation. The root cause is an asynchronous token validation mechanism: when a Mattermost slash token is rotated, OpenClaw's monitor does not immediately invalidate the old token, creating a window during which requests using the revoked token are still accepted. The vulnerability is reachable over the network if the affected Mattermost integration feature is enabled and configured. Successful exploitation allows an attacker with a revoked token to invoke slash command behavior until the monitor refresh cycle completes. The advisory notes this is scoped to the named feature and does not affect OpenClaw's core trusted-operator model. The patch is available in version 2026.4.24; as a temporary mitigation, operators should manually restart or refresh the Mattermost monitor after token rotation.
Affected products
- OpenClaw OpenClaw all versions before 2026.4.24
Timeline
- 2026-07-02: disclosed: Published as GHSA-4m3v-q747-pc6h
- 2026-04-24: patched: Fixed in version 2026.4.24