Frontier models can vanish overnight. Control is the new frontier in security AI.See why→

CVE-2026-28471

Discovered by AISLEPUBLISHEDCWE-287

Description

OpenClaw version 2026.1.14-1 prior to 2026.2.2, with the Matrix plugin installed and enabled, contain a vulnerability in which DM allowlist matching could be bypassed by exact-matching against sender display names and localparts without homeserver validation. Remote Matrix users can impersonate allowed identities by using attacker-controlled display names or matching localparts from different homeservers to reach the routing and agent pipeline.

CVSS Base Scores

CVSS v4.06.3

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

CVSS v3.1
5.3

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected Products

VendorProductVersionStatus
OpenClawOpenClaw2026.1.14-1affected

Credits

  • @MegaManSec (https://joshua.hu) of AISLE Research Team(reporter)

References