Executive brief
OpenClaw, a tool used for managing Slack integrations and gateways, contains a security flaw in how it identifies Slack users. The system incorrectly allows security policies to be based on 'display names,' which can be changed by any user, rather than permanent, unique IDs. An attacker could change their Slack display name to match an authorized user, potentially gaining unauthorized access to sensitive tools or data managed by the OpenClaw gateway.
Technical details
OpenClaw (npm package) is vulnerable to an authentication bypass (CWE-290) in its Slack 'allowFrom' feature. The root cause is the application's reliance on mutable Slack display name metadata for policy enforcement rather than immutable Slack user IDs. A remote attacker with low privileges (the ability to change their own Slack display name) can craft a name that matches an entry in an allowlist. If successful, the attacker can gain agent access or execute commands intended for a different, authorized Slack identity. The vulnerability is patched in version 2026.5.3.
Affected products
- openclaw openclaw <= 2026.5.3-1
Timeline
- 2026-05-28: disclosed
- 2026-07-02: advisory
- 2026-05-28: patched: First stable patched version is 2026.5.3