diff --git a/CHANGELOG.md b/CHANGELOG.md
index 53a3571684c6638e72a35011ee4c2f4d20413a0d..e6ab29045992a2dc4a4326fd6cc2830e0ae09d8c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -12,6 +12,9 @@ The format is based on [keep a changelog](http://keepachangelog.com) and this pr
 - Match handlers are now required to implement a signal handler function.
 - Log status follow missing users at debug instead of warning level.
 
+### Fixed
+- Fix input validation edge case in group listing operations.
+
 ## [3.7.0] - 2021-09-28
 ### Added
 - New config options to enforce a single socket per user, and a single match per socket.
diff --git a/server/api_group.go b/server/api_group.go
index cedca66b664dda27922716b1205c5e78b1545c81..c72c956188683bfd6cfa72496ec431904978003c 100644
--- a/server/api_group.go
+++ b/server/api_group.go
@@ -852,6 +852,7 @@ func (s *ApiServer) ListGroups(ctx context.Context, in *api.ListGroupsRequest) (
 	var open *bool
 	openIn := in.GetOpen()
 	if openIn != nil {
+		open = new(bool)
 		*open = openIn.GetValue()
 	}