Slack (< 2026.8.1) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/slack--2026.8.1/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioSat, 26 Sep 2026 04:57:26 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgAuthentication Bypass in OpenClaw Slackhttps://feed.craftedsignal.io/briefs/2026-09-openclaw-slack-auth-bypass/Sat, 26 Sep 2026 04:57:26 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-09-openclaw-slack-auth-bypass/OpenClaw Slack versions prior to 2026.8.1 fail to enforce sender allowlists in multi-person direct messages, allowing unauthorized participants to interact with Slack agents and access restricted tools or data.OpenClaw Slack versions prior to 2026.8.1 contain an authentication bypass vulnerability, tracked as CVE-2026-100575, within the application's multi-person direct messaging component. The flaw stems from a failure to correctly validate sender allowlists when participants interact with automated agents configured within the chat environment. By bypassing these sender policies, an unauthorized or disallowed participant in a multi-person conversation can trigger agent execution, effectively masquerading as authorized users. This allows attackers to invoke tools and access sensitive data granted to the agent service accounts, potentially leading to unauthorized data exfiltration or manipulation of connected third-party services. Given the reliance on agent-based workflows, this vulnerability presents a significant risk to organizations using OpenClaw Slack for internal automation.

Impact

Successful exploitation of this vulnerability allows unauthorized users within a multi-person chat thread to perform actions on behalf of Slack agents. This can result in unauthorized access to internal tools, data retrieval, and the potential execution of malicious commands or queries through agent-integrated systems. The scope of impact is limited to the permissions granted to the specific Slack agent compromised by the bypass.

Recommendation

  1. Upgrade OpenClaw Slack installations to version 2026.8.1 or later immediately to resolve CVE-2026-100575.
  2. Review and audit current Slack agent permissions to minimize the potential blast radius of unauthorized interactions.
  3. Restrict sensitive agent integrations to dedicated channels where participant access can be strictly managed until the patch is deployed.
]]>highadvisoryvulnerabilityauthentication-bypasscloud