GHSA-rf6h-5gpw-qrgq: OpenClaw: MS Teams Feedback Invocation Bypasses Sender Allowlists and Records Unauthorized Session Feedback

March 29, 2026

MS Teams Feedback Invoke Bypasses Sender Allowlists and Records Unauthorized Session Feedback

References

github.com/advisories/GHSA-rf6h-5gpw-qrgq
github.com/openclaw/openclaw
github.com/openclaw/openclaw/commit/c5415a474bb085404c20f8b312e436997977b1ea
github.com/openclaw/openclaw/security/advisories/GHSA-rf6h-5gpw-qrgq

Code Behaviors & Features

Detect and mitigate GHSA-rf6h-5gpw-qrgq with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →