CVE-2026-32906

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.5.12

Description A privilege escalation issue exists in Slack plugin approvals. This allows users with exec-authorized permissions to resolve plugin approvals via the exec approver gate, enabling them to bypass intended approval splits and approve plugin actions that fall outside the operator configuration.

Recommendations Update to version 2026.5.12.