PT-2026-99171

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.8.1 Description An authorization bypass exists in the webhook TaskFlow cancellation process. An attacker possessing a webhook route secret can provide an arbitrary child session key to cancel ACP or subagent wor...