Beveiligingsadvies

CVE-2026-100575

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-26 02:19:02

Laatst bijgewerkt 2026-10-08 15:21:48

Toegewezen door VulnCheck

CVSS-score 8.8

Status PUBLISHED

Beschrijving

OpenClaw Slack versions before 2026.8.1 fail to properly enforce sender allowlists in multi-person direct messages. Disallowed participants can trigger Slack agents and access tools and data granted to those agents by bypassing configured sender policies.

← Alle CVE's bekijken Bekijk op cve.org ↗