OpenClaw versions 2026.4.10 through 2026.4.13 contain a missing authorization check in the Microsoft Teams SSO invoke handler. The flaw prevents the handler from enforcing the sender allowlist, allowing attackers to craft SSO invoke requests that are processed without proper validation. This gives an attacker unauthorized access to the Teams SSO signin functionality, effectively bypassing access controls and potentially exposing sensitive information or enabling further compromise.

The vulnerability affects the OpenClaw software produced by the OpenClaw vendor. Specifically, versions 2026.4.10, 2026.4.11, 2026.4.12, and 2026.4.13 of OpenClaw are affected. The product is a Node.js application and is listed in the Common Platform Enumeration as openclaw:openclaw. The affected environment typically hosts integrations with Microsoft Teams SSO.

The CVSS score of 6.3 indicates a moderate severity, with medium impact to confidentiality and integrity if exploitation is successful. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting no known widespread exploitation to date. Based on the description, the likely attack vector is remote; an adversary can send malicious invoke requests over the network to the handler endpoint. No special privileges or local access are required beyond the ability to direct requests to the affected service.