CVE-2026-100531 openclaw CVE debrief

Who should care

Defenders responsible for Slack configurations and npm package management should assess exposure and verify the @openclaw/slack package version. This includes operators managing Slack deployments, platform administrators overseeing npm package updates, vulnerability management teams evaluating potential impacts, and security teams responsible for monitoring and incident response. They should prioritize verifying and upgrading to version 2026.8.1 of the @op

Why it matters

CVE-2026-100531 is an authorization flaw in the @openclaw/slack npm package that allows data disclosure across conversation boundaries. Defenders should verify and upgrade to version 2026.8.1 to prevent unauthorized data disclosure.

• Potential data disclosure across conversation boundaries.
• Need to verify and upgrade to version 2026.8.1.
• Risk of unauthorized file downloads.

Technical summary

The @openclaw/slack npm package before version 2026.8.1 contains an authorization flaw in its Slack download-file handler. When a file lacks the share metadata used to prove it belongs to the requested conversation, the conversation-authorization check fails open. An authenticated caller restricted to a single conversation who knows or obtains a file identifier can therefore download file contents from outside that conversation's scope, disclosing data across configured conversation boundaries.

Defensive priority

Defenders should prioritize verifying and upgrading to version 2026.8.1 of the @openclaw/slack npm package to prevent unauthorized data disclosure across conversation boundaries.

Recommended defensive actions

• Verify the @openclaw/slack npm package version and upgrade to 2026.8.1 if necessary.
• Restrict access to sensitive conversations and files.
• Monitor for unauthorized file downloads.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.

Evidence notes

The CVE record and NVD entry provide details on the authorization flaw in the @openclaw/slack npm package. The issue is fixed in version 2026.8.1. Evidence is limited to CVE and NVD entries. Defenders should verify the @openclaw/slack package version and upgrade to 2026.8.1 if necessary, noting that the CVE and NVD may not capture all potential exposures or impacts. Additional verification tasks may be needed.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.