OpenClaw's Telegram message_reaction authorization bypass allows unauthorized system-event injection
Key facts
- Attack vector
- —
- Privileges required
- —
- User interaction
- —
- Attack complexity
- —
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- —
- Fix status
- Fixed
No CVSS vector from any source. Fix status from GitHub. Impact type from CWE-863.
Summary
A missing sender-authorization check in Telegram `message_reaction` handling allowed unauthorized users to trigger reaction-derived system events. ## Affected Packages / Versions - Package: `openclaw` (npm) - Introduced: `2026.2.17` - Affected: `>= 2026.2.17` and `<= 2026.2.24` - Latest published at patch time: `2026.2.24` - Patched in release: `2026.2.25` ## Impact When reaction notifications are enabled, unauthorized Telegram senders could inject reaction system events despite configured DM/group authorization controls (`dmPolicy`, `allowFrom`, `groupPolicy`, `groupAllowFrom`). ## Fix Commit(s) - `e56b0cf1a04f992ac6ebc775899f48ea31687640` ## Release Process Note `patched_versions` is pre-set to the release (`2026.2.25`) so once npm release `2026.2.25` is published, this advisory can be published without further edits. OpenClaw thanks @tdjackey for reporting.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | openclaw (npm) | before 2026.2.25 | 2026.2.25 | Patch available | GHSA-qj22-xqjr-v83v |
- openclaw (npm) Vendor— Affected before 2026.2.25 Fixed in 2026.2.25 Patch available GHSA-qj22-xqjr-v83v
Remediation
- Fix · GHSA-qj22-xqjr-v83v openclaw (npm) Fixed in 2026.2.25 Advisory →
Timeline
- 2026-10-03 Threatist record created from GHSA-qj22-xqjr-v83v
References
Sources
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences