OpenClaw before 2026.3.31 parses MS Teams webhook request bodies before performing JWT validation, allowing unauthenticated attackers to trigger resource exhaus…

OpenClaw versions before 2026.3.31 contain a vulnerability where MS Teams webhook request bodies are parsed before JWT validation is performed. This authentication bypass allows unauthenticated remote attackers to send malicious Teams webhook payloads that can exhaust server resources. The vulnerability enables denial of service attacks by bypassing authentication checks, making it possible for attackers to consume server resources without valid credentials. The issue has been addressed in version 2026.3.31 and later.