Slack (Openclaw) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-09-26. Vendor: Openclaw.

CVEs of Slack

• CVE-2026-100575 - CVSS 8.8 (high), 2026-09-26: OpenClaw Slack versions before 2026.8.1 fail to properly enforce sender allowlists in multi-person direct messages. Disallowed participants can trigger Slack…
• CVE-2026-100531 - CVSS 7.1 (high), 2026-09-26: The @openclaw/slack npm package before 2026.8.1 contains an authorization flaw in its Slack download-file handler: when a file lacks the share metadata used…