Executive brief
OpenClaw is a framework that includes optional plugins for integrating with chat platforms like Synology Chat. In versions 2026.2.22–2026.2.23, the Synology Chat plugin's access control policy had a critical flaw: when configured with an allowlist but the allowlist was left empty, the plugin incorrectly allowed all messages through instead of blocking them. This allowed unauthorized users with Synology Chat access to trigger automated agent actions and invoke downstream tools they should not have permission to access.
Technical details
The vulnerability is an authorization bypass (CWE-863) in the synology-chat channel plugin where a "fail-open" logic error occurs when dmPolicy is set to "allowlist" with an empty allowedUserIds array. The root cause is a policy mismatch: the default resolved policy is allowlist, but empty allowedUserIds is treated as allow-all, causing the webhook authentication to accept all inbound Synology senders. An attacker with Synology Chat sender access can bypass authorization checks and trigger unauthorized agent dispatch and downstream tool actions. The vulnerability was patched in version 2026.2.24 (commits 0ee30361b8f6ef3f110f3a7b001da6dd3df96bb5 and 7655c0cb3a47d0647cbbf5284e177f90b4b82ddb).
Affected products
- OpenClaw OpenClaw 2026.2.22 to 2026.2.23
Timeline
- 2026-02-25: disclosed
- 2026-02-25: patched: Version 2026.2.24 published with fix
- 2026-03-19: advisory