N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-rg8m-3943-vm6q

GHSA-rg8m-3943-vm6q: OpenClaw: Matrix thread root and reply context bypass sender allowlist

Summary

Matrix thread root and reply context bypass sender allowlist

Current Maintainer Triage

Status: open
Normalized severity: medium
Assessment: Real in shipped v2026.3.28 Matrix because fetched thread-root/reply context bypasses sender allowlists, with unreleased mainline filtering fix.

Affected Packages / Versions

Package: openclaw (npm)
Latest published npm version: 2026.3.31
Vulnerable version range: <=2026.3.28
Patched versions: >= 2026.3.31
First stable tag containing the fix: v2026.3.31

Fix Commit(s)

8a563d603b70ef6338915f0527bee87282c3bad5 — 2026-03-31T17:09:03+01:00

OpenClaw thanks @AntAISecurityLab for reporting.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-rg8m-3943-vm6q

GHSA-rg8m-3943-vm6q:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	<= 2026.3.28	2026.3.31

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability described is a bypass of a sender allowlist for Matrix thread and reply contexts. The provided commit 8a563d603b70ef6338915f0527bee87282c3bad5 directly addresses this. The analysis of the commit shows that the primary logic change is within the createMatrixRoomMessageHandler function in extensions/matrix/src/matrix/monitor/handler.ts. This function is the central point for handling incoming room messages. The patch adds authorization checks to this function, specifically by introducing the shouldIncludeRoomContextSender helper function, which verifies the sender of a thread's root message or a replied-to message against the room's allowlist. If the check fails, the context is discarded. This indicates that prior to the patch, the createMatrixRoomMessageHandler function was processing and including this context without the necessary authorization, which is the root cause of the vulnerability. The other modified files support this fix by propagating the sender's ID to where the check is performed. Therefore, createMatrixRoomMessageHandler is the key vulnerable function that would appear in a runtime profile during the exploitation of this vulnerability.

Vulnerable functions

createMatrixRoomMessageHandler

extensions/matrix/src/matrix/monitor/handler.ts

The `createMatrixRoomMessageHandler` function is responsible for processing incoming messages in a Matrix room. Before the patch, this function would fetch and display context for threads and replies (e.g., the original message in a thread) without checking if the sender of that context was on the room's configured allowlist. This allowed a user not on the allowlist to inject content into the room's conversation by having an allowlisted user reply to or create a thread from their message. The patch introduces a new inline function, `shouldIncludeRoomContextSender`, which checks the sender of the context against the allowlist. If the sender is not permitted, the context is dropped and not displayed.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.