OpenClaw, the npm package openclaw, allows a Teams member who is not on the allowlist to trigger a configured agent when the groupPolicy is set to allowlist and the configured access group is missing or unsupported. The denied group‑resolution result is not rejected by the final message‑admission check, creating an authentication bypass that can be exploited to access conversations, tools, and data that the agent can reach.

All OpenClaw versions prior to 2026.8.1 are affected, including the npm package openclaw. The vulnerability is specific to the Microsoft Teams integration component of OpenClaw.

The CVSS score of 5.3 indicates medium severity. EPSS is not available and the vulnerability is not listed in CISA KEV, suggesting a lower likelihood of widespread exploitation. An attacker needs to be a member of the target Microsoft Teams environment to use the bypass; once inside, they can trigger the agent and gain access to the data and tools it can reach. Given the moderate score, the risk is considered medium until the issue is patched.