N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-gw85-xp4q-5gp9

GHSA-gw85-xp4q-5gp9: OpenClaw's Synology Chat dmPolicy=allowlist failed open on empty allowedUserIds, allowing unauthorized agent dispatch

Summary

In openclaw versions 2026.2.22 and 2026.2.23, the optional synology-chat channel plugin had an authorization fail-open condition: when dmPolicy was allowlist and allowedUserIds was empty/unset, unauthorized senders were still allowed through to agent dispatch.

This is assessed as medium severity because it requires channel/plugin setup and Synology sender access, but can still trigger downstream agent/tool actions.

Affected Packages / Versions

Package: openclaw (npm)
Affected versions: >= 2026.2.22, <= 2026.2.23
Latest published affected version at patch time: 2026.2.23
Planned patched version: 2026.2.24

Details

Root cause was a policy mismatch across plugin code paths:

Default resolved DM policy was allowlist.
Empty allowedUserIds was treated as allow-all.
Webhook auth in allowlist mode depended on that helper.

Result: allowlist with empty list behaved like open access for inbound Synology senders.

Fix Commit(s)

0ee30361b8f6ef3f110f3a7b001da6dd3df96bb5
7655c0cb3a47d0647cbbf5284e177f90b4b82ddb

Release Process Note

patched_versions is pre-set to the planned next release (>= 2026.2.24). Once npm release 2026.2.24 is published, the advisory can be published directly.

OpenClaw thanks @tdjackey for reporting.

Publication Update (2026-02-25)

openclaw@2026.2.24 is published on npm and contains the fix commit(s) listed above. This advisory now marks >= 2026.2.24 as patched.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-gw85-xp4q-5gp9

GHSA-gw85-xp4q-5gp9:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	>= 2026.2.22, <= 2026.2.23	2026.2.24

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability is an improper access control flaw within the 'synology-chat' plugin. The root cause lies in the checkUserAllowed function, which incorrectly treated an empty user allowlist as a permissive 'allow-all' rule when the dmPolicy was set to 'allowlist'. This function was called by the webhook handler created by createWebhookHandler, which is the entry point for processing incoming messages from Synology Chat. An attacker could send a message from an unauthorized Synology account, and if the OpenClaw instance was configured with an empty allowedUserIds list, the webhook handler would grant access, allowing the message to be dispatched to an agent for processing. The patch corrects this by removing the faulty logic in checkUserAllowed to ensure an empty list denies access, and adds a specific check in the webhook handler to reject messages when the allowlist is empty, thus implementing a fail-closed mechanism.

Vulnerable functions

checkUserAllowed

extensions/synology-chat/src/security.ts

This function implemented the core logic flaw. It incorrectly returned 'true' (authorized) when the 'allowedUserIds' list was empty, treating an empty allowlist as an 'allow all' policy. This fail-open condition is the root cause of the vulnerability.

createWebhookHandler

extensions/synology-chat/src/webhook-handler.ts

This function creates the webhook handler that processes incoming messages. It directly used the vulnerable 'checkUserAllowed' function to perform authorization. When 'dmPolicy' was 'allowlist' and the 'allowedUserIds' list was empty, this handler would incorrectly grant access to any user, allowing unauthorized messages to be processed and dispatched to agents.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

N/A

-

Basic Information

Basic Information

Concerned about an active attack path?

GHSA-gw85-xp4q-5gp9: OpenClaw's Synology Chat dmPolicy=allowlist failed open on empty allowedUserIds, allowing unauthorized agent dispatch

Summary

Affected Packages / Versions

Details

Fix Commit(s)

Release Process Note

Publication Update (2026-02-25)

GHSA-gw85-xp4q-5gp9:

N/A

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

GHSA-gw85-xp4q-5gp9: OpenClaw's Synology Chat dmPolicy=allowlist failed open on empty allowedUserIds, allowing unauthorized agent dispatch

Summary

Affected Packages / Versions

Details

Fix Commit(s)

Release Process Note

Publication Update (2026-02-25)

Technical Details

N/A

N/A

Basic Information

Basic Information

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI