CVE-2026-100541: OpenClaw Matrix before 2026.8.1 Authorization Bypass via Case Folding
OpenClaw's Matrix integration (npm package @openclaw/matrix) versions >= 2026.2.2 and < 2026.8.1 lowercase complete Matrix user IDs — including historical localparts and the case-sensitive server-name portion — when deriving the OpenClaw authorization identity. As a result, distinct authenticated Matrix accounts can normalize to the same authorization identity. A Matrix participant controlling a colliding account identifier (a protocol-valid identifier that differs from the configured one only by characters OpenClaw case/Unicode folds; display-name matching is not required) can inherit allowlist, owner-command, exec-approval, or plugin-approval authority configured for another account. The issue is fixed in 2026.8.1.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
@openclaw/matrixto a version that resolves this vulnerability.Fixed in 2026.8.1
Event History
Frequently Asked Questions
Which deployments are exposed?
Deployments using the @openclaw/matrix package in versions 2026.2.2 through versions earlier than 2026.8.1 are affected. Exposure exists where Matrix authorization authority is configured for accounts, including allowlist, owner-command, exec-approval, or plugin-approval authority.
What does an attacker need to exploit this issue?
The attacker needs an authenticated Matrix account whose protocol-valid identifier collides with a configured authorized account after OpenClaw lowercases or case/Unicode-folds it. The attacker does not need display-name matching.
Are highly privileged Matrix permissions at risk?
Yes. A colliding account can inherit the configured target account's allowlist, owner-command, exec-approval, or plugin-approval authority, depending on what is assigned to that account.
What should teams do to remediate the issue?
Upgrade @openclaw/matrix to version 2026.8.1, which fixes the issue. Review configured Matrix identities that hold authorization or approval authority for possible case- or Unicode-folding collisions.