Description
OpenClaw before 2026.3.22 contains a policy confusion vulnerability in room authorization that matches colliding room names instead of stable room tokens. Attackers can exploit similarly named rooms to bypass allowlist policies and gain unauthorized access to protected Nextcloud Talk rooms.
Affected products
openclaw: openclaw
References4
- github.com/openclaw/openclaw/security/advisories/GHSA-xhq5-45pm… Vendor Advisory
- github.com/openclaw/openclaw/commit/630f1479c44f78484dfa21bb407… Patch
- github.com/openclaw/openclaw/commit/a47722de7e3c9cbda8d5512747c… Patch
- www.vulncheck.com/advisories/openclaw-policy-confusion-via-room… Third Party Advisory
Metrics
- CVSS 3.1
-
5.4
MEDIUM
Score source: NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N - CVSS 4.0
-
2.3
LOW
Score source: CNA
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - EPSS — exploit probability
- 0% percentile: 17 · as of 12 November 2026
- CWE
- CWE-807
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.