OpenClaw CVE-2026-43572

OpenClaw is a Node.js/npm-based package that provides integration and automation handling for Microsoft Teams. The vulnerability exists in the Microsoft Teams extension's SSO (single sign-on) invoke handler, specifically in the monitor-handler.sso component. The SSO invoke handler processes signin/tokenExchange and signin/verifyState invoke requests from Teams but was missing critical sender allowlist validation logic. Teams administrators configure sender allowlists via policies (dmPolicy, groupPolicy) and specific allowlist entries (allowFrom, groupAllowFrom) to restrict who can invoke SSO operations. The CWE-862 (Missing Authorization) root cause reflects that the authorization checks present in normal Teams message handling were not replicated in the SSO code path, creating a logic gap where privileged operations could be initiated by unauthorized senders. The commit diff shows the fix adds comprehensive coverage for three denied sender scenarios: direct message senders outside the DM allowlist, group chat senders outside the group allowlist, and channel-based senders outside team/channel allowlists.