GHSA-qj22-xqjr-v83v OpenClaw's Telegram message_reaction authorization bypass allows unauthorized system-event injection

Q: Which versions are affected by GHSA-qj22-xqjr-v83v?

2 open source packages ship an affected version, including openclaw.

Q: Is GHSA-qj22-xqjr-v83v being exploited?

There is no known exploitation of GHSA-qj22-xqjr-v83v in the wild and no public exploit code.

Q: How do I fix GHSA-qj22-xqjr-v83v?

Upgrade openclaw to 2026.2.25 or later.

Not scored Published 3 Mar 2026

Unauthorized Telegram users can inject system events by bypassing sender authorization checks in OpenClaw's message reaction handling.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is GHSA-qj22-xqjr-v83v?

GHSA-qj22-xqjr-v83v is a missing authorization vulnerability in openclaw, published on 3 Mar 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A missing sender-authorization check in Telegram message_reaction handling allowed unauthorized users to trigger reaction-derived system events.

Affected Packages / Versions

Package: openclaw (npm)
Introduced: 2026.2.17
Affected: >= 2026.2.17 and <= 2026.2.24
Latest published at patch time: 2026.2.24
Patched in release: 2026.2.25

Impact

When reaction notifications are enabled, unauthorized Telegram senders could inject reaction system events despite configured DM/group authorization controls (dmPolicy, allowFrom, groupPolicy, groupAllowFrom).

Fix Commit(s)

e56b0cf1a04f992ac6ebc775899f48ea31687640

Release Process Note

patched_versions is pre-set to the release (2026.2.25) so once npm release 2026.2.25 is published, this advisory can be published without further edits.

OpenClaw thanks @tdjackey for reporting.

Which versions are affected by GHSA-qj22-xqjr-v83v?