CVE-2026-100531
Received Received - Intake

Authorization Bypass in OpenClaw Slack Package

Publication date: 2026-09-26

Last updated on: 2026-09-26

Assigner: VulnCheck

Description
The @openclaw/slack npm package before 2026.8.1 contains an authorization flaw in its Slack download-file handler: when a file lacks the share metadata used to prove it belongs to the requested conversation, the conversation-authorization check fails open. An authenticated caller restricted to a single conversation who knows or obtains a file identifier can therefore download file contents from outside that conversation's scope, disclosing data across configured conversation boundaries. The issue does not allow listing arbitrary Slack files and does not bypass Slack authentication itself. The issue is fixed in version 2026.8.1.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-26
Last Modified
2026-09-26
Generated
2026-09-26
AI Q&A
2026-09-26
EPSS Evaluated
N/A
NVD
CVE-2026-100531
EUVD
EUVD-2026-87519

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
openclaw slack to 2026.8.1 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-639 The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-100531 is an authorization bypass flaw in the @openclaw/slack npm package versions before 2026.8.1. The vulnerability occurs in the Slack download-file handler when a file lacks share metadata proving it belongs to a requested conversation. This causes the conversation-authorization check to fail, allowing an authenticated user restricted to one conversation to download file contents from outside that conversation's scope by using a known file identifier.

Detection Guidance

To detect this vulnerability, check the installed version of the @openclaw/slack npm package. If it is below 2026.8.1, the system is vulnerable. Run: npm list @openclaw/slack or npm view @openclaw/slack version to verify the installed version.

Impact Analysis

This vulnerability could allow unauthorized access to sensitive files across conversation boundaries. An attacker with access to a file identifier could retrieve file contents from conversations they are not authorized to access, potentially leading to data leaks or unauthorized disclosure of confidential information.

Compliance Impact

This vulnerability could lead to violations of data protection regulations such as GDPR and HIPAA by enabling unauthorized access to sensitive data across conversation boundaries. Organizations using the affected package may face compliance risks due to potential data breaches and unauthorized disclosure of protected information.

Mitigation Strategies

Immediately upgrade the @openclaw/slack package to version 2026.8.1 or later using: npm install @openclaw/slack@latest. Until upgraded, restrict file downloads from untrusted sources and avoid relying on conversation scoping for files with missing metadata.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-100531. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart