OpenClaw versions 2026.1.30 and earlier contain an information disclosure vulnerability in the MS Teams attachment downloader extension. The vulnerability allows bearer tokens to leak to allowlisted suffix domains when the application retries downloads after receiving 401 or 403 responses. The flaw sends Authorization bearer tokens to untrusted hosts that match a permissive suffix-based allowlist, enabling token theft. The vulnerability has been patched in version 2026.2.1 and requires the optional MS Teams extension to be enabled to be exploitable.