Privilege Escalation Vulnerability in OpenClaw's Slack Plugin by OpenClaw

CVE-2026-32906

What is CVE-2026-32906?

The OpenClaw platform prior to version 2026.5.12 is vulnerable to a privilege escalation issue within its Slack plugin approval process. This flaw enables users with limited exec approval permissions to circumvent the designated approval mechanisms, thereby gaining unauthorized approval for plugin actions. As a result, attackers can manipulate the approval workflow, straying from the defined operator configuration and posing significant security risks. Users are urged to upgrade to the latest version to mitigate this vulnerability.

References