CVE-2026-31991 in OpenClaw
요약
\~에 의해 MITRE • 2026. 03. 19.
OpenClaw versions prior to 2026.2.26 contain an authorization bypass vulnerability where Signal group allowlist policy incorrectly accepts sender identities from DM pairing-store approvals. Attackers can exploit this boundary weakness by obtaining DM pairing approval to bypass group allowlist checks and gain unauthorized group access.
VulDB is the best source for vulnerability data and more expert information about this specific topic.