Openclaw CVE-2026-31998

OpenClaw versions 2026.2.22 and 2026.2.23 with synology-chat channel plugin configured with dmPolicy set to allowlist mode but with empty allowedUserIds. Attacker must have Synology sender access to exploit. No victim interaction required.

The CVSS 3.1 score of 7.0 (High) reflects network-based attack vector with high attack complexity, no privileges required, and no user interaction needed. The high attack complexity (AC:H) suggests exploitation requires specific conditions such as authenticated Synology Chat access and knowledge of the misconfigured dmPolicy allowlist. The impact profile shows high integrity impact and low confidentiality/availability impact, consistent with unauthorized action execution. Real-world risk is moderate: while the CVSS severity is high, the attack requires the specific misconfiguration of using an empty allowlist (rather than default-deny or properly populated allowlist), limiting the attack surface to organizations that explicitly but incorrectly configured this security control. Without EPSS data or KEV listing, and with patches immediately available from the vendor, this represents a manageable risk for organizations with standard patch cycles, though those using the affected synology-chat plugin should prioritize remediation.

An attacker with legitimate Synology Chat sender credentials discovers that a target organization has configured OpenClaw's synology-chat plugin with an empty allowedUserIds allowlist. The attacker sends specially crafted messages through Synology Chat that bypass the failed-open authorization check, triggering agent dispatch commands that execute privileged tool actions such as data retrieval, system configuration changes, or workflow automation that should be restricted to authorized administrators only.