N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-h656-5vcf-cm23

GHSA-h656-5vcf-cm23: OpenClaw: Unauthorized Telegram Senders Trigger Media Download and Disk Write Before Access Check

Impact

In Telegram DM mode, inbound media was downloaded and written to disk before sender authorization checks completed. An unauthorized sender could trigger inbound media download/write activity (including media groups) even when DM access should be denied.

Affected Packages / Versions

Package: openclaw (npm)
Latest published version currently affected: 2026.2.23
Vulnerable range: <= 2026.2.23
Patched in planned next release: 2026.2.24

Fix Commit(s)

9514201fb9b51de5d0b23151110d0ff5d9c8bd67

Technical Details

The Telegram handler flow now enforces DM authorization before media download/write paths execute, including media-group handling. Inbound channel activity tracking was also moved to run after DM authorization in the Telegram message context path.

Release Process Note

patched_versions is pre-set to the planned next release (2026.2.24). After npm publish, the advisory can be published without further version-field edits.

OpenClaw thanks @v8hid for reporting.

Publication Update (2026-02-25)

openclaw@2026.2.24 is published on npm and contains the fix commit(s) listed above. This advisory now marks >= 2026.2.24 as patched.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-h656-5vcf-cm23

GHSA-h656-5vcf-cm23:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	<= 2026.2.23	2026.2.24

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability allowed unauthorized users in Telegram Direct Messages to trigger media downloads and disk writes because sender authorization checks were performed too late in the message processing workflow. The analysis of the fixing commit, 9514201fb9b51de5d0b23151110d0ff5d9c8bd67, identified two main functions contributing to this flaw.

registerTelegramHandlers (in src/telegram/bot-handlers.ts): This function sets up the primary event handler for incoming messages. In the vulnerable version, this handler would call processInboundMessage immediately, which in turn would start the download of any attached media. This happened before the sender's permissions were verified. The patch corrects this by adding a crucial check using the new enforceTelegramDmAccess function for any DM containing media, stopping the process if the sender is unauthorized.
buildTelegramMessageContext (in src/telegram/bot-message-context.ts): This function contained the original, but flawed, authorization logic. The check was performed too late, as the media download was already initiated by registerTelegramHandlers. Furthermore, it logged channel activity via recordChannelActivity before validating the user, creating a potential information leak. The patch replaces this scattered logic with a call to the centralized enforceTelegramDmAccess function and ensures logging only happens for authorized users.

The root cause was an incorrect order of operations. The fix involved creating a dedicated function for authorization, enforceTelegramDmAccess, and invoking it at the very beginning of the message handling process in both registerTelegramHandlers and buildTelegramMessageContext to prevent any processing or I/O operations for unauthenticated users.

Vulnerable functions

registerTelegramHandlers

src/telegram/bot-handlers.ts

This function registers the message handler for Telegram. Before the patch, the handler would call `processInboundMessage` for messages containing media without first performing an authorization check. This allowed an unauthorized user to trigger a media download and write to disk. The patch adds a call to `enforceTelegramDmAccess` before `processInboundMessage` to ensure the sender is authorized.

buildTelegramMessageContext

src/telegram/bot-message-context.ts

This function was responsible for sender authorization, but it was executed after the media download process had already been initiated by `registerTelegramHandlers`. Additionally, it would call `recordChannelActivity` before the authorization check, logging activity from unauthorized users. The patch removes the inline authorization logic and replaces it with a call to the new `enforceTelegramDmAccess` function, and moves the `recordChannelActivity` call to after the check.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

N/A

-

Basic Information

Basic Information

Concerned about an active attack path?

GHSA-h656-5vcf-cm23: OpenClaw: Unauthorized Telegram Senders Trigger Media Download and Disk Write Before Access Check

Impact

Affected Packages / Versions

Fix Commit(s)

Technical Details

Release Process Note

Publication Update (2026-02-25)

GHSA-h656-5vcf-cm23:

N/A

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Basic Information

Basic Information

N/A

N/A

Technical Details

GHSA-h656-5vcf-cm23: OpenClaw: Unauthorized Telegram Senders Trigger Media Download and Disk Write Before Access Check

Impact

Affected Packages / Versions

Fix Commit(s)

Technical Details

Release Process Note

Publication Update (2026-02-25)

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI