OpenClaw versions before 2026.5.12 allow Slack reaction events to bypass the notification disable setting and flow into the agent processing pipeline. This bypass can cause lower‑trust input to be processed without the usual safeguards, potentially enabling attackers to inject or execute unintended actions within the system. The vulnerability is categorized as Missing Authorization (CWE‑862).

Any installation of OpenClaw older than version 2026.5.12 is affected. No detailed sub‑version list is provided, so all pre‑2026.5.12 releases are considered vulnerable.

The CVSS score of 6.3 indicates moderate severity, while the EPSS score of less than 1% suggests a low but non‑zero likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is the abuse of Slack reaction events delivered to the OpenClaw webhook when reaction notifications are disabled. An attacker with the ability to add reactions in a Slack channel integrated with OpenClaw could trigger unauthorized input processing.