EUVD-2026-87380

OpenClaw npm package openclaw before 2026.7.1 incorrectly binds Signal approval reactions. In affected versions, a reaction intended to resolve a structured approval request could instead attach to ordinary outbound text when unrelated outbound messages and a pending approval are present in the...

CVE-2026-100598 OpenClaw before 2026.7.1 Approval Binding Logic Error

OpenClaw npm package openclaw before 2026.7.1 incorrectly binds Signal approval reactions. In affected versions, a reaction intended to resolve a structured approval request could instead attach to ordinary outbound text when unrelated outbound messages and a pending approval are present in the...

CVE-2026-100597

The OpenClaw npm package (openclaw ) prior to version 2026.7.1 is vulnerable to a time-of-check time-of-use (TOCTOU) race condition within OpenShell local mirror filesystem mutation operations. Specifically, the remove, mkdir, and rename operations may target a different filesystem path if the pa...

EUVD-2026-87454

OpenClaw npm package 'openclaw' before 2026.7.1 is vulnerable to a time-of-check time-of-use race condition in OpenShell local mirror filesystem mutation operations. The remove, mkdir, and rename operations could act on a different filesystem target after OpenClaw completed its sandbox path-safet...

CVE-2026-100597 OpenClaw before 2026.7.1 Path Traversal via Filesystem Race

OpenClaw npm package 'openclaw' before 2026.7.1 is vulnerable to a time-of-check time-of-use race condition in OpenShell local mirror filesystem mutation operations. The remove, mkdir, and rename operations could act on a different filesystem target after OpenClaw completed its sandbox path-safet...

CVE-2026-100597 OpenClaw before 2026.7.1 Path Traversal via Filesystem Race

OpenClaw npm package 'openclaw' before 2026.7.1 is vulnerable to a time-of-check time-of-use race condition in OpenShell local mirror filesystem mutation operations. The remove, mkdir, and rename operations could act on a different filesystem target after OpenClaw completed its sandbox path-safet...

CVE-2026-100597 OpenClaw before 2026.7.1 Path Traversal via Filesystem Race

OpenClaw npm package 'openclaw' before 2026.7.1 is vulnerable to a time-of-check time-of-use race condition in OpenShell local mirror filesystem mutation operations. The remove, mkdir, and rename operations could act on a different filesystem target after OpenClaw completed its sandbox path-safet...

CVE-2026-100595 OpenClaw before 2026.7.1 Authorization Bypass via diagnostics

OpenClaw versions before 2026.7.1 contain an authorization bypass vulnerability in the diagnostics export command that allows non-owner channel senders to access owner-only host diagnostic bundles. Attackers can request and receive diagnostic details about the host, configuration, runtime, and...

EUVD-2026-87455

OpenClaw versions before 2026.7.1 fail to properly authorize non-owner users executing MCP configuration changes through /mcp set and /mcp unset commands. Attackers can persist arbitrary stdio MCP commands that execute with OpenClaw process privileges when configuration loads, compromising host...

CVE-2026-100595 OpenClaw before 2026.7.1 Authorization Bypass via diagnostics

OpenClaw versions before 2026.7.1 contain an authorization bypass vulnerability in the diagnostics export command that allows non-owner channel senders to access owner-only host diagnostic bundles. Attackers can request and receive diagnostic details about the host, configuration, runtime, and...

CVE-2026-100596 OpenClaw before 2026.7.1 Authorization Bypass via MCP Configuration

OpenClaw versions before 2026.7.1 fail to properly authorize non-owner users executing MCP configuration changes through /mcp set and /mcp unset commands. Attackers can persist arbitrary stdio MCP commands that execute with OpenClaw process privileges when configuration loads, compromising host...

CVE-2026-100595

OpenClaw versions before 2026.7.1 are vulnerable to an authorization bypass in the diagnostics export command. This flaw allows non-owner channel senders to access restricted host diagnostic bundles , enabling them to retrieve sensitive details regarding the host, configuration, runtime, and conn...

CVE-2026-100595 OpenClaw before 2026.7.1 Authorization Bypass via diagnostics

OpenClaw versions before 2026.7.1 contain an authorization bypass vulnerability in the diagnostics export command that allows non-owner channel senders to access owner-only host diagnostic bundles. Attackers can request and receive diagnostic details about the host, configuration, runtime, and...

CVE-2026-100596

Versions of OpenClaw prior to 2026.7.1 are vulnerable to an authorization bypass that allows non-owner users to execute MCP configuration changes via the /mcp set and /mcp unset commands. By exploiting this flaw, an attacker can persist arbitrary stdio MCP commands which execute with the OpenClaw...

EUVD-2026-87456

OpenClaw versions before 2026.7.1 contain an authorization bypass vulnerability in the diagnostics export command that allows non-owner channel senders to access owner-only host diagnostic bundles. Attackers can request and receive diagnostic details about the host, configuration, runtime, and...

CVE-2026-100596 OpenClaw before 2026.7.1 Authorization Bypass via MCP Configuration

OpenClaw versions before 2026.7.1 fail to properly authorize non-owner users executing MCP configuration changes through /mcp set and /mcp unset commands. Attackers can persist arbitrary stdio MCP commands that execute with OpenClaw process privileges when configuration loads, compromising host...

CVE-2026-100594

Versions of OpenClaw prior to 2026.7.1 are vulnerable to an authorization bypass in the /export-trajectory endpoint. Due to insufficient authorization checks, non-owner senders can request and receive owner-only trajectory bundles. This allows attackers to access sensitive data from affected sess...

CVE-2026-100594 OpenClaw before 2026.7.1 Authorization Bypass via trajectory export

OpenClaw versions before 2026.7.1 contain an authorization bypass vulnerability in the /export-trajectory endpoint that allows non-owner senders to request and receive owner-only trajectory bundles. Attackers can access prompts, model messages, tool schemas, runtime events, and local path metadat...

CVE-2026-100594 OpenClaw before 2026.7.1 Authorization Bypass via trajectory export

OpenClaw versions before 2026.7.1 contain an authorization bypass vulnerability in the /export-trajectory endpoint that allows non-owner senders to request and receive owner-only trajectory bundles. Attackers can access prompts, model messages, tool schemas, runtime events, and local path metadat...

EUVD-2026-87457

OpenClaw versions before 2026.7.1 contain an authorization bypass vulnerability in the /export-trajectory endpoint that allows non-owner senders to request and receive owner-only trajectory bundles. Attackers can access prompts, model messages, tool schemas, runtime events, and local path metadat...