CVE-2026-100568 in OpenClaw
요약
\~에 의해 MITRE • 2026. 09. 26.
OpenClaw versions before 2026.8.1 fail to properly restrict access to operator command cron jobs, allowing model-visible agent callers to read and execute ownerless command jobs. Attackers can inspect stored environment variables and force-run disabled or unscheduled command jobs to access secrets and execute operator-authored commands.
If you want to get best quality of vulnerability data, you may have to visit VulDB.