Executive brief
OpenClaw is a Node.js library that integrates messaging platforms like Telegram with system automation. A missing authorization check allows unauthorized Telegram users to bypass configured access controls and inject false system events by sending message reactions, even when their messages would normally be rejected by DM or group policies. An attacker could exploit this to trigger unintended actions or inject malicious events into systems relying on OpenClaw's event handling.
Technical details
The vulnerability is a missing sender-authorization check (CWE-863) in the Telegram message_reaction event handler introduced in version 2026.2.17. When reaction notifications are enabled, the vulnerable code processes reaction events without verifying that the sender is authorized according to configured dmPolicy, allowFrom, groupPolicy, or groupAllowFrom controls. An attacker with network access and a Telegram account can send reactions to messages, bypassing configured access policies and injecting reaction-derived system events. The fix, released in version 2026.2.25 (commit e56b0cf1), enforces authorization checks before reaction event processing. The vulnerability affects npm package openclaw versions 2026.2.17 through 2026.2.24.
Affected products
- OpenClaw openclaw 2026.2.17 through 2026.2.24
Timeline
- 2026-03-03: disclosed
- 2026-02-26: patched: patch released in version 2026.2.25