CVE-2026-100557

Versions of OpenClaw prior to 2026.8.1 are vulnerable to an authorization bypass within the skill tool dispatch. The root cause is a failure to propagate the sender's owner status, which allows non-owner users authorized to invoke skill commands to access owner-only tools and server credentials r...