{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/slack--2026.8.1/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:openclaw:slack:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-100575"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Slack (\u003c 2026.8.1)"],"_cs_severities":["high"],"_cs_tags":["vulnerability","authentication-bypass","cloud"],"_cs_type":"advisory","_cs_vendors":["OpenClaw"],"content_html":"\u003cp\u003eOpenClaw Slack versions prior to 2026.8.1 contain an authentication bypass vulnerability, tracked as CVE-2026-100575, within the application's multi-person direct messaging component. The flaw stems from a failure to correctly validate sender allowlists when participants interact with automated agents configured within the chat environment. By bypassing these sender policies, an unauthorized or disallowed participant in a multi-person conversation can trigger agent execution, effectively masquerading as authorized users. This allows attackers to invoke tools and access sensitive data granted to the agent service accounts, potentially leading to unauthorized data exfiltration or manipulation of connected third-party services. Given the reliance on agent-based workflows, this vulnerability presents a significant risk to organizations using OpenClaw Slack for internal automation.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation of this vulnerability allows unauthorized users within a multi-person chat thread to perform actions on behalf of Slack agents. This can result in unauthorized access to internal tools, data retrieval, and the potential execution of malicious commands or queries through agent-integrated systems. The scope of impact is limited to the permissions granted to the specific Slack agent compromised by the bypass.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eUpgrade OpenClaw Slack installations to version 2026.8.1 or later immediately to resolve CVE-2026-100575.\u003c/li\u003e\n\u003cli\u003eReview and audit current Slack agent permissions to minimize the potential blast radius of unauthorized interactions.\u003c/li\u003e\n\u003cli\u003eRestrict sensitive agent integrations to dedicated channels where participant access can be strictly managed until the patch is deployed.\u003c/li\u003e\n\u003c/ol\u003e\n","date_modified":"2026-09-26T04:57:26Z","date_published":"2026-09-26T04:57:26Z","id":"https://feed.craftedsignal.io/briefs/2026-09-openclaw-slack-auth-bypass/","summary":"OpenClaw Slack versions prior to 2026.8.1 fail to enforce sender allowlists in multi-person direct messages, allowing unauthorized participants to interact with Slack agents and access restricted tools or data.","title":"Authentication Bypass in OpenClaw Slack","url":"https://feed.craftedsignal.io/briefs/2026-09-openclaw-slack-auth-bypass/"}],"language":"en","title":"CraftedSignal Threat Feed - Slack (\u003c 2026.8.1)","version":"https://jsonfeed.org/version/1.1"}