
CVE-2026-34509 OpenClaw before 2026.3.8 contains a sender allowlist bypass vulnerability in its Microsoft Teams plugin that allows unauthorized senders to bypass intended authorizat… https://www.cve.org/CVERecord?id=CVE-2026-34509
Post summary
The post announces a sender allowlist bypass vulnerability in OpenClaw’s Microsoft Teams plugin, providing basic technical detail but no evidence of exploitation or mitigation.

