Philip

**Name of the Vulnerable Software and Affected Versions** OpenClaw versions prior to 2026.5.7 **Description** The `allowFrom` feature improperly validates Discord account identity by using mutable display names instead of immutable user IDs. This allows an attacker to change their display or global name metadata to match a policy entry, potentially gaining unauthorized agent access intended for a different Discord identity. This issue is specific to the named feature and configuration and does not affect the trusted-operator model regarding authenticated Gateway operators, installed plugins, or local execution surfaces. **Recommendations** Update to version 2026.5.7. Use stable Discord user IDs in allowlists. Keep channel and tool allowlists narrow. Avoid sharing one Gateway between mutually untrusted users. Disable the `allowFrom` feature when it is not needed.

**Name of the Vulnerable Software and Affected Versions** OpenClaw versions prior to 2026.5.3 **Description** A policy enforcement issue exists where Zalo contacts with mutable display metadata can match `allowFrom` policy entries by changing their display names. This allows attackers with mutable display names to receive agent responses intended for different Zalo identities when the feature is enabled. **Recommendations** Update to version 2026.5.3. Use stable Zalo identifiers where available and keep friend access restricted. Keep channel and tool allowlists narrow. Avoid sharing one Gateway between mutually untrusted users. Disable the affected feature when it is not needed.

**Name of the Vulnerable Software and Affected Versions** OpenClaw versions prior to 2026.5.3 **Description** A privilege escalation issue exists in the `allowFrom` feature, which binds to mutable Slack display names. Attackers with access to a Slack account can modify display name metadata to match policy entries, potentially gaining unauthorized agent access intended for other identities. **Recommendations** Update to version 2026.5.3.

**Name of the Vulnerable Software and Affected Versions** OpenClaw versions prior to 2026.5.7 **Description** A privilege escalation issue exists in the Matrix `allowFrom` feature. Authenticated accounts can match policy entries by manipulating mutable display name metadata. This allows attackers who can change their display names to obtain agent access intended for a different Matrix identity, which may lead to unauthorized permissions based on the operator configuration. **Recommendations** Update to version 2026.5.7 or later.

**Name of the Vulnerable Software and Affected Versions** X-Cart version 3.4.3 **Description** A directory traversal issue allows remote attackers to view arbitrary files by including a .. (dot dot) in the `shop closed file` argument to "auth.php". **Recommendations** For X-Cart version 3.4.3, consider restricting access to the "auth.php" file until a patch is available, or apply a configuration change to prevent directory traversal attacks by properly sanitizing the `shop closed file` argument.