What’s Vulnerable › Vulnerabilities

CVE-2026-28471: OpenClaw 2026.1.14-1 < 2026.2.2 - Allowlist Bypass via displayName and Cross-Homeserver localpart Matching in Matrix Plugin

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-03-05 · updated 2026-06-17
• Weakness: CWE-287

Description

OpenClaw version 2026.1.14-1 prior to 2026.2.2, with the Matrix plugin installed and enabled, contain a vulnerability in which DM allowlist matching could be bypassed by exact-matching against sender display names and localparts without homeserver validation. Remote Matrix users can impersonate allowed identities by using attacker-controlled display names or matching localparts from different homeservers to reach the routing and agent pipeline.

Affected products

• OpenClaw: from 2026.1.14-1 before 2026.2.2 — fixed in 2026.2.2

How to fix

Upgrade to a fixed version: OpenClaw 2026.2.2. Check the vendor advisory for mitigations.

References

• https://github.com/openclaw/openclaw/commit/8f3bfbd1c4fb967a2ddb5b4b9a05784920814bcf
• https://github.com/openclaw/openclaw/security/advisories/GHSA-rmxw-jxxx-4cpc
• https://www.vulncheck.com/advisories/openclaw-allowlist-bypass-via-displayname-and-cross-homeserver-localpart-matching-in-matrix

Get alerted when CVE-2026-28471 or the next vulnerability affects your stack