GHSA-gw85-xp4q-5gp9 OpenClaw's Synology Chat dmPolicy=allowlist failed open on empty allowedUserIds, allowing unauthorized agent dispatch

• npm openclaw: >= 2026.2.22, < 2026.2.24 → fixed in 2026.2.24

Summary In `openclaw` versions `2026.2.22` and `2026.2.23`, the optional `synology-chat` channel plugin had an authorization fail-open condition: when `dmPolicy` was `allowlist` and `allowedUserIds` was empty/unset, unauthorized senders were still allowed through to agent dispatch. This is assessed as medium severity because it requires channel/plugin setup and Synology sender access, but can still trigger downstream agent/tool actions. Affected Packages / Versions • Package: `openclaw` (npm) • Affected versions: `>= 2026.2.22, = 2026.2.24`). Once npm release `2026.2.24` is published, the advisory can be published directly. OpenClaw thanks @tdjackey for reporting. Publication Update (2026-02-25) `[email protected]` is published on npm and contains the fix commit(s) listed above. This advisory now marks `>= 2026.2.24` as patched.