Executive Summary

This vulnerability exists in OpenClaw versions before 2026.5.12 and involves Slack reaction events bypassing disabled notification settings.

Specifically, even when reaction notifications are disabled, Slack reaction events can still enter the agent pipeline, which is unintended behavior.

Attackers can exploit this by sending reaction events when the feature is enabled, causing the system to process inputs that should have been blocked.

This can lead to unauthorized processing of lower-trust input, potentially affecting the system's security.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can lead to unintended agent processing triggered by Slack reaction events that should have been blocked.

This means attackers might cause the system to process unauthorized or lower-trust inputs, potentially leading to security risks such as improper handling of data or actions.

Mitigations include disabling or restricting Slack reaction event subscriptions until patched, keeping channel and tool allowlists narrow, avoiding shared Gateways between untrusted users, and disabling the feature when unnecessary.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, you should upgrade OpenClaw to version 2026.5.12 or later where the issue is patched.

• Disable or restrict Slack reaction event subscriptions until the patch is applied.
• Keep channel and tool allowlists narrow to limit exposure.
• Avoid sharing Gateways between untrusted users.
• Disable the Slack reaction notification feature if it is not necessary.

Useful 0 Not Useful 0