OpenClaw iMessage group allowlist authorization inherited DM pairing-store identities
OpenClaw versions up to 2026.2.13 (clawdbot up to 2026.1.24-3) contained an authorization flaw where iMessage group allowlist authorization could be bypassed by senders approved only via direct message pairing. The vulnerability allowed unauthorized cross-context command authorization and was patched in version 2026.2.14.
What happened
Under iMessage groupPolicy=allowlist, group authorization could be satisfied by sender identities coming from the DM pairing store, broadening DM trust into group contexts. The vulnerable logic in src/imessage/monitor/monitor-provider.ts derived effectiveGroupAllowFrom using both the static group allowlist and DM pairing-store identities (storeAllowFrom).
This allowed a sender approved via DM pairing to satisfy group authorization in groups even if the sender/chat was not explicitly present in groupAllowFrom, weakening boundary separation between DM pairing and group allowlist authorization.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.