CVE-2026-100604 ClawHub Authentication Bypass via Former Publisher Skill Control

ClawHub openclaw/clawhub contains an incorrect authorization vulnerability in the ClawHub application/backend: an organization-owned skill retains the ownerUserId of its original publisher, and transfer and lifecycle authorization checks trust that historical user before requiring current...