GHSA-wm8r-w8pf-2v6w: 
OpenClaw (formerly Moltbot or Clawdbot) vulnerability analysis and mitigation

Summary

In OpenClaw 2026.2.25, Signal group authorization under groupPolicy=allowlist could accept sender identities sourced from DM pairing-store approvals. This allowed DM pairing approvals to leak into group allowlist evaluation.

Impact

This is an authorization-boundary weakness between DM pairing and group allowlist controls. A sender approved for DM pairing could pass group checks without explicit group allowlisting.

Affected Packages / Versions

• Package: openclaw (npm)
• Latest published version affected: 2026.2.25
• Vulnerable range: <= 2026.2.25
• Patched version (planned next release): >= 2026.2.26

Fix

OpenClaw now keeps DM pairing-store entries DM-only and enforces explicit group allowlist boundaries in shared DM/group policy resolution used by Signal and other channels.

Fix Commit(s)

• 8bdda7a651c21e98faccdbbd73081e79cffe8be0
• 64de4b6d6ae81e269ceb4ca16f53cda99ced967a

Release Process Note

patched_versions is pre-set to the planned next release (2026.2.26). After npm publish of that version, this advisory is ready to publish without further content edits. Thanks @tdjackey for reporting.