GitHub Advisoryadvisory · npm

GHSA-534w-2vm4-89xr OpenClaw's Zalo group sender allowlist bypass permits unauthorized GROUP dispatch

MEDIUM Published 2026-03-03 Modified 2026-03-03 Official page ↗
Ecosystem
npm
Packages
openclaw
Severity
Moderate
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Weaknesses
CWE-284, CWE-863
Reviewed
2026-03-03

Affected packages

• npm openclaw: < 2026.2.24 → fixed in 2026.2.24

Description

A missing group-sender authorization check in the Zalo plugin allowed unauthorized `GROUP` messages to enter agent dispatch paths in configurations intended to restrict group traffic. Impact When Zalo group handling was configured with allowlist-style controls, a sender not present in the intended group allowlist could still trigger agent processing through the `GROUP` message path. Root Cause Group access checks were not consistently enforced before dispatch for Zalo `GROUP` messages. The fix adds explicit runtime group-policy evaluation (`groupPolicy`, `groupAllowFrom`, fallback to `allowFrom`) and fail-closed behavior for missing provider config. Affected Packages / Versions • Package: `openclaw` (npm) • Latest published vulnerable version: `2026.2.23` (as of 2026-02-24) • Affected range: `= 2026.2.24` as patched.

Related

Weakness · CWE (2)

  • CWE-284 Improper Access Control weakness
  • CWE-863 Incorrect Authorization weakness

References