Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw versions prior to 2026.2.26 fail to enforce sender authorization in member and message subtype system event handlers, allowing unauthorized events to be enqueued. Attackers can bypass Slack DM allowlists and per-channel user allowlists by sending system events from non-allowlisted senders through message_changed, message_deleted, and thread_broadcast events.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-21 | 2 | Disclosure1General1 |
| 2026-03-25 | 2 | Patch2 |
OpenClaw CVE-2026-32895: authorization bypass in all versions before 2026.2.26. Attackers can bypass channel allowlists via system event handlers. CVSS 5.3 Medium. Patch now.
Post summary
OpenClaw CVE-2026-32895 is an authorization bypass affecting all versions prior to 2026.2.26, enabling attackers to bypass channel allowlists via system event handlers; the issue has a CVSS score of 5.3 Medium and a patch is now available.
CVE-2026-32895 OpenClaw versions prior to 2026.2.26 fail to enforce sender authorization in member and message subtype system event handlers, allowing unauthorized events to be enqu… https://www.cve.org/CVERecord?id=CVE-2026-32895
Post summary
The CVE record notes a sender‑authorization flaw in OpenClaw event handlers affecting versions prior to 2026.2.26, but provides no PoC, exploit, or patch details.
Full breakdown of the vulnerability, what's exposed, and how to update: https://subagentic.ai/posts/openclaw-cve-2026-32895-authorization-bypass-patch-now/ #AgenticAI #Security
Post summary
A link is provided to a post offering a breakdown and update guidance for CVE‑2026‑32895, indicating the availability of a patch but lacking detailed technical or exploitation information.
🚨*CVE* CVE-2026-32895 OpenClaw versions prior to 2026.2.26 fail to enforce sender authorization in member and message subtype system event handlers, allowing unauthorized events to be enqu… https://www.cve.org/CVERecord?id=CVE-2026-32895 ----- Traducción: CVE-2026-32895 Ope… http://infoflow.cloud`
Post summary
The post cites CVE‑2026‑32895 and provides a brief technical description of the authorization flaw, but offers no PoC, exploit, patch, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |