A critical authorization bypass vulnerability in OpenClaw allows attackers with Synology sender access to perform unauthorized actions due to a misconfigured security policy.

The vulnerability is an authorization bypass (CWE-863) occurring within the Synology chat channel plugin. When the dmPolicy is set to allowlist with empty allowedUserIds, the system fails open, allowing unauthenticated attackers with Synology sender access to trigger unauthorized agent dispatches and downstream tool executions.

The ability for unauthorized actors to trigger downstream tool actions and agent dispatches presents a significant risk to operational integrity and system security. With a CVSS score of 7.0, this flaw represents a high severity risk that could lead to unauthorized data manipulation or unauthorized process execution within the affected environment.

Immediate Action: Update the OpenClaw package to version 2026.2.24 or later to apply the necessary authorization logic fixes.

Proactive Monitoring: Review system logs for unusual agent dispatch requests or tool executions originating from the Synology chat integration.

Compensating Controls: If immediate patching is not feasible, consider disabling the Synology chat channel plugin or restricting access to the associated API endpoints until the update can be applied.

Public Exploit Available: No — there is no confirmed public exploit or proof-of-concept available in the provided data.

Given the potential for unauthorized system interaction, administrators should prioritize the deployment of version 2026.2.24. Ensuring that the authorization logic is correctly enforced is essential to prevent the misuse of agent dispatch capabilities. Please verify the application of this update across all environments to mitigate the risk of unauthorized access.