CVE-2026-31998

EPSS 0.07%

OpenClaw's Synology Chat dmPolicy=allowlist failed open on empty allowedUserIds, allowing unauthorized agent dispatch

發布日:2026/3/3修改日:2026/3/20

描述

### Summary In `openclaw` versions `2026.2.22` and `2026.2.23`, the optional `synology-chat` channel plugin had an authorization fail-open condition: when `dmPolicy` was `allowlist` and `allowedUserIds` was empty/unset, unauthorized senders were still allowed through to agent dispatch. This is assessed as **medium** severity because it requires channel/plugin setup and Synology sender access, but can still trigger downstream agent/tool actions. ### Affected Packages / Versions - Package: `openclaw` (npm) - Affected versions: `>= 2026.2.22, <= 2026.2.23` - Latest published affected version at patch time: `2026.2.23` - Planned patched version: `2026.2.24` ### Details Root cause was a policy mismatch across plugin code paths: 1. Default resolved DM policy was `allowlist`. 2. Empty `allowedUserIds` was treated as allow-all. 3. Webhook auth in allowlist mode depended on that helper. Result: `allowlist` with empty list behaved like open access for inbound Synology senders. ### Fix Commit(s) - `0ee30361b8f6ef3f110f3a7b001da6dd3df96bb5` - `7655c0cb3a47d0647cbbf5284e177f90b4b82ddb` ### Release Process Note `patched_versions` is pre-set to the planned next release (`>= 2026.2.24`). Once npm release `2026.2.24` is published, the advisory can be published directly. OpenClaw thanks @tdjackey for reporting. ### Publication Update (2026-02-25) `[email protected]` is published on npm and contains the fix commit(s) listed above. This advisory now marks `>= 2026.2.24` as patched.

受影響套件(1)

npm/openclaw>= 2026.2.22, < 2026.2.24

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 4.0	—	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

描述

受影響套件(1)

CVSS 分數

參考連結(6)