GHSA-xg59-f45v-9r9j: Duplicate Advisory: OpenClaw's MS Teams sender allowlist bypass when route allowlist is configured and sender allowlist is empty
(updated )
Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-g7cr-9h7q-4qxq. This link is maintained to preserve external references.
Original Description
OpenClaw before 2026.3.8 contains a sender allowlist bypass vulnerability in its Microsoft Teams plugin that allows unauthorized senders to bypass intended authorization checks. When a team/channel route allowlist is configured with an empty groupAllowFrom parameter, the message handler synthesizes wildcard sender authorization, permitting any sender in the matched team/channel to trigger replies in allowlisted Teams routes.
References
- github.com/advisories/GHSA-xg59-f45v-9r9j
- github.com/openclaw/openclaw/commit/88aee9161e0e6d32e810a25711e32a808a1777b2
- github.com/openclaw/openclaw/security/advisories/GHSA-g7cr-9h7q-4qxq
- nvd.nist.gov/vuln/detail/CVE-2026-34506
- www.vulncheck.com/advisories/openclaw-sender-allowlist-bypass-in-microsoft-teams-plugin-via-route-allowlist-configuration
Code Behaviors & Features
Detect and mitigate GHSA-xg59-f45v-9r9j with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →