Moved: 2026-03-29 — OpenClaw Telegram DM-scoped inline button callbacks bypass DM pairing and mutate session state (GHSA-j4c9-w69r-cw33)¶

This page was consolidated during the 2026-05-22 redundancy cleanup.

Canonical page: 2026-03-29 — OpenClaw Telegram DM-scoped callback authorization bypass (GHSA-j4c9-w69r-cw33)

Keep this compatibility pointer so old links do not 404, but make future updates on the canonical page.