CVE-2026-53851

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.5.12

Description A notification bypass allows Slack reaction events to enter the agent pipeline even when reaction notifications are disabled. This can trigger unintended agent processing for reaction events, potentially leading to the unauthorized processing of lower-trust input. This issue occurs when the affected feature is enabled and reachable.

Recommendations Update to version 2026.5.12. Disable or restrict Slack reaction event subscriptions if this path is not required. Disable the affected feature when it is not needed. Keep channel and tool allowlists narrow and avoid sharing one Gateway between mutually untrusted users.