PT-2026-31756 · Openclaw · Openclaw
CVSS v3.1
5.4
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
OpenClaw versions prior to 2026.3.25
Description
OpenClaw contains an authorization bypass affecting Google Chat group policy enforcement. This issue stems from reliance on mutable space display names, allowing attackers to rebind group policies by modifying or colliding space display names, potentially gaining unauthorized access to protected resources.
Recommendations
Update OpenClaw to version 2026.3.25 or later.
Exploit
Fix
Incorrect Authorization
IDOR
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Openclaw