Bug type
Behavior bug (incorrect output/state without crash)
Beta release blocker
No
Summary
The openclaw message send CLI command can send DMs to any user in the Slack workspace, even when channels.slack.dmPolicy: "allowlist" is configured with a restricted allowFrom list.
Config
"channels": {
"slack": {
"dmPolicy": "allowlist",
"allowFrom": ["U13SPRCE7"]
}
}
### Steps to reproduce
1. Run: openclaw message send --channel slack --target "U_OTHER_USER" --message "test"
2. Message is delivered successfully despite user not being in allowlist
### Expected behavior
unning openclaw message send --channel slack --target "U015WTU317C" should be blocked because U015WTU317C is not in allowFrom.
### Actual behavior
Message is sent successfully, bypassing the allowlist restriction.
### OpenClaw version
2026.5.2
### Operating system
Ubuntu 24.04
### Install method
_No response_
### Model
opus 4.1
### Provider / routing chain
openclaw - opus 4.1.
### Additional provider/model setup details
_No response_
### Logs, screenshots, and evidence
```shell
Impact and severity
Security — agents can bypass their own DM restrictions via CLI tool, enabling unintended outbound messages to workspace members.
Additional information
Suggested fix: openclaw message send should validate target against dmPolicy + allowFrom before sending, or add separate outboundPolicy / outboundAllowTo config.
Bug type
Behavior bug (incorrect output/state without crash)
Beta release blocker
No
Summary
The
openclaw message sendCLI command can send DMs to any user in the Slack workspace, even whenchannels.slack.dmPolicy: "allowlist"is configured with a restrictedallowFromlist.Config
Impact and severity
Security — agents can bypass their own DM restrictions via CLI tool, enabling unintended outbound messages to workspace members.
Additional information
Suggested fix: openclaw message send should validate target against dmPolicy + allowFrom before sending, or add separate outboundPolicy / outboundAllowTo config.