Executive brief
OpenClaw, an open-source tool for chat integrations, contains a vulnerability in its Synology Chat extension. This flaw allows an attacker to bypass security policies that separate different user accounts, potentially gaining unauthorized access to private direct messages. By exploiting how the system handles webhooks, an attacker could take over communication routes intended for other users.
Technical details
A vulnerability exists in OpenClaw's Synology Chat extension (specifically within accounts.ts and gateway-runtime.ts) due to improper handling of webhook paths. In multi-account configurations, the system may allow different accounts to collapse onto shared or inherited webhook paths. A remote attacker can exploit this path collision to replace route ownership across accounts, effectively bypassing Direct Message (DM) access control policies. The fix, introduced in version 2026.3.22, ensures the system distinguishes between inherited and explicit paths and 'fails closed' when a duplicate path is detected.
Affected products
- OpenClaw openclaw < 2026.3.22
Timeline
- 2026-03-22: patched: Fix committed to repository
- 2026-04-09: advisory: NVD/VulnCheck advisory published
- 2026-04-10: disclosed: GitHub Advisory published and subsequently withdrawn as duplicate
References
- https://github.com/openclaw/openclaw/security/advisories/GHSA-rqp8-q22p-5j9q
- https://github.com/openclaw/openclaw/commit/630f1479c44f78484dfa21bb407cbe6f171dac87
- https://github.com/openclaw/openclaw/commit/980940aa58f862da4e19372597bbc2a9f268d70b
- https://www.vulncheck.com/advisories/openclaw-webhook-path-route-replacement-vulnerability-in-synology-chat