Beveiligingsadvies

CVE-2026-28392

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-05 21:59:20

Laatst bijgewerkt 2026-03-10 14:43:57

Toegewezen door VulnCheck

CVSS-score 8.2

Status PUBLISHED

Beschrijving

OpenClaw versions prior to 2026.2.14 contain a privilege escalation vulnerability in the Slack slash-command handler that incorrectly authorizes any direct message sender when dmPolicy is set to open (must be configured). Attackers can execute privileged slash commands via direct message to bypass allowlist and access-group restrictions.

← Alle CVE's bekijken Bekijk op cve.org ↗