Openclaw CVE-2026-32911

The CVSS 3.1 score of 6.4 (Medium-High) with vector CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L reflects a network-accessible vulnerability requiring low privilege (authenticated Synology sender) and high attack complexity, with moderate confidentiality impact and high integrity impact. The high complexity factor (AC:H) likely stems from the requirement for a specific misconfiguration (empty allowedUserIds in allowlist mode), which may limit real-world exposure. However, the integrity impact rating (I:H) is significant because attackers can forge unauthorized messages to downstream agents, potentially triggering unintended automation actions or data modification. The availability of a vendor patch and multiple commit references demonstrates vendor responsiveness. While EPSS scoring data is not provided in the intelligence sources, the combination of require-authentication prerequisite, configuration-dependent trigger condition, and legitimate vendor patch availability suggests this is a medium-priority issue rather than an emergency—organizations with Synology Chat integration and proper change management should prioritize patching within standard maintenance windows.

An attacker with valid Synology sender credentials (network-accessible, low-privilege) identifies an OpenClaw deployment running version 2026.2.22 with the synology-chat plugin configured in allowlist mode but with an empty allowedUserIds field. The attacker crafts a message via Synology Chat targeting a downstream agent or tool, which the plugin fails to validate due to the empty allowlist condition. The message bypasses authorization checks and is dispatched to the agent, allowing the attacker to trigger unintended actions such as data exfiltration, system reconfiguration, or lateral movement to connected systems. The high attack complexity requirement (AC:H) suggests this requires either specific misconfiguration discovery or prior knowledge of the target's policy setup.