Skip to content
Fencer Intel
medium —

GHSA-h656-5vcf-cm23 json

OpenClaw: Unauthorized Telegram Senders Trigger Media Download and Disk Write Before Access Check

published 8mo ago modified 8mo ago

cvss
—
not scored
cisa kev
Not listed
not in CISA's catalog
epss
—
no score, EPSS covers CVEs only
public exploits
0
none known

Summary

## Impact

In Telegram DM mode, inbound media was downloaded and written to disk before sender authorization checks completed. An unauthorized sender could trigger inbound media download/write activity (including media groups) even when DM access should be denied.

## Affected Packages / Versions

- Package: `openclaw` (npm) - Latest published version currently affected: `2026.2.23` - Vulnerable range: `<= 2026.2.23` - Patched in planned next release: `2026.2.24`

## Fix Commit(s)

- `9514201fb9b51de5d0b23151110d0ff5d9c8bd67`

## Technical Details

The Telegram handler flow now enforces DM authorization before media download/write paths execute, including media-group handling. Inbound channel activity tracking was also moved to run after DM authorization in the Telegram message context path.

## Release Process Note

`patched_versions` is pre-set to the planned next release (`2026.2.24`). After npm publish, the advisory can be published without further version-field edits.

OpenClaw thanks @v8hid for reporting.

### Publication Update (2026-02-25) `openclaw@2026.2.24` is published on npm and contains the fix commit(s) listed above. This advisory now marks `>= 2026.2.24` as patched.

Patch / fix

  • npm openclaw 2026.2.24

Is GHSA-h656-5vcf-cm23 in your dependencies? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Affected packages

ecosystem package affected fixed in
npm openclaw
<2026.2.24
2026.2.24

Classification

Weakness
  • CWE-208 Observable Timing Discrepancy
  • CWE-404 Improper Resource Shutdown or Release
  • CWE-406 Insufficient Control of Network Message Volume (Network Amplification)
  • CWE-770 Allocation of Resources Without Limits or Throttling

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

The maintainers of openclaw/openclaw published their own advisory on GitHub. Reviewed sources take precedence over it.