CVE-2026-100595 in OpenClaw
요약
\~에 의해 MITRE • 2026. 09. 26.
OpenClaw versions before 2026.7.1 contain an authorization bypass vulnerability in the diagnostics export command that allows non-owner channel senders to access owner-only host diagnostic bundles. Attackers can request and receive diagnostic details about the host, configuration, runtime, and connected services intended only for owners.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.