N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-534w-2vm4-89xr

GHSA-534w-2vm4-89xr: OpenClaw's Zalo group sender allowlist bypass permits unauthorized GROUP dispatch

A missing group-sender authorization check in the Zalo plugin allowed unauthorized GROUP messages to enter agent dispatch paths in configurations intended to restrict group traffic.

Impact

When Zalo group handling was configured with allowlist-style controls, a sender not present in the intended group allowlist could still trigger agent processing through the GROUP message path.

Root Cause

Group access checks were not consistently enforced before dispatch for Zalo GROUP messages. The fix adds explicit runtime group-policy evaluation (groupPolicy, groupAllowFrom, fallback to allowFrom) and fail-closed behavior for missing provider config.

Affected Packages / Versions

Package: openclaw (npm)
Latest published vulnerable version: 2026.2.23 (as of 2026-02-24)
Affected range: <= 2026.2.23
Planned patched version: 2026.2.24

Fix Commit(s)

b4010a0b627025c809c0e5dbdbd4770f3bc59ef8

OpenClaw thanks @tdjackey for reporting.

Publication Update (2026-02-25)

openclaw@2026.2.24 is published on npm and contains the fix commit(s) listed above. This advisory now marks >= 2026.2.24 as patched.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-534w-2vm4-89xr

GHSA-534w-2vm4-89xr:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	<= 2026.2.23	2026.2.24

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability lies in the Zalo channel integration of OpenClaw, where group message sender authorization was not being enforced. The fix commit b4010a0b627025c809c0e5dbdbd4770f3bc59ef8 introduces the necessary access control logic. The analysis of the patch reveals that the processMessageWithPipeline function in extensions/zalo/src/monitor.ts is the entry point for processing incoming messages. The patch adds a new block of code within this function that calls evaluateZaloGroupAccess for group messages. This new function checks the sender against the configured group policy (groupPolicy and groupAllowFrom). Before this change, processMessageWithPipeline would process all group messages without this check, leading to the allowlist bypass. Therefore, processMessageWithPipeline is the vulnerable function, as it's the function that handles the unauthorized input.

Vulnerable functions

processMessageWithPipeline

extensions/zalo/src/monitor.ts

The `processMessageWithPipeline` function is responsible for handling incoming Zalo messages. Prior to the patch, this function lacked an authorization check for messages originating from a group chat. This allowed messages from any group sender to be processed, bypassing the configured `groupAllowFrom` allowlist. The vulnerability was that this function would process the message without verifying if the sender was authorized.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.