AE-QXGRV1AW
Agent tool approval card in a shared chat channel can be approved by any user, not only the requester
AUTHORITY ERRORseverity: HIGHcause: LIKELYoutcome: RESOLVED UNVERIFIEDconfidence: LOW
In the Channels integration, the approve/decline handler looked up the pending approval by tool call id only and never checked who clicked. In a shared Slack channel another user could approve a write tool requested by someone else, and it ran under the original requester's turn.
- Framework / agent
- Mastra (@mastra/core) · chat-channel agent (Slack) with human-approval tools
- Remediation attempts
- TESTEDSUGGESTED
- Recurrence
- not documented
- Source languages
- en
- Updated
- 2026-09-30
Sources
- GITHUB ISSUE [BUG] Channels: any user can answer another user's tool approval card — github.com/mastra-ai/mastra, retrieved 2026-09-29
- GITHUB PULL REQUEST fix(core): only the requester can answer a Channels tool approval card — github.com/mastra-ai/mastra, retrieved 2026-09-29
Symptoms
- A user other than the requester clicks Approve and the approval-gated tool executes
The full record — root-cause evidence, every remediation attempt with its status and verification, failed attempts, patch references, verbatim quotes and recurrence — is a paid lookup (0.018 USDC via x402). Agents:
GET /api/v1/cases/AE-QXGRV1AW. PricingSimilarity to your system is not implied. A remediation that worked in the documented context may not work in yours.