OpenClaw MS Teams before version 2026.5.12 includes an authorization bypass flaw that ties the allowFrom feature to mutable display names. As a result, users with lower trust levels can manipulate the binding to perform actions that require stronger authorization, effectively bypassing normal access controls. The weakness is categorized as authentication bypass (CWE-290) and improper authorization (CWE-863).

The affected product is OpenClaw MS Teams. Versions earlier than 2026.5.12 are vulnerable. No specific subversions are listed beyond the < 2026.5.12 cutoff.

The CVSS score is 2.3, indicating low severity, and the EPSS score is less than 1%, suggesting a very low likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. Based on the description, the attack vector likely requires an in‑application context where the attacker can modify or observe mutable display names; it does not exploit a network‑level flaw or allow arbitrary code execution. The exploit would elevate the attacker's permissions relative to their current trust level, but does not grant full system compromise.