CVE-2026-100534 OpenClaw before 2026.8.1 Session Cancellation Authorization Bypass

OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in webhook TaskFlow cancellation that allows attackers to cancel unrelated sessions. An attacker with a webhook route secret can supply an arbitrary child session key to cancel ACP or subagent work outside the route's...

CVE-2026-100532 openclaw WhatsApp before 2026.8.1 Authentication Bypass

@openclaw/whatsapp npm before 2026.8.1 exposes the WhatsApp login tool through the generic channel-tool path without preserving the originating sender's owner status, so the owner-only tool boundary is not enforced. An admitted non-owner sender able to steer the tool can request a forced login an...

CVE-2026-100533

OpenClaw versions before 2026.8.1 contain a path traversal vulnerability in the tools.fs.workspaceOnly feature where Unicode filename fallback can normalize validated parent directory components. Admitted requesters can exploit canonically equivalent sibling directories to read files outside the...

CVE-2026-100532

@openclaw/whatsapp npm before 2026.8.1 exposes the WhatsApp login tool through the generic channel-tool path without preserving the originating sender's owner status, so the owner-only tool boundary is not enforced. An admitted non-owner sender able to steer the tool can request a forced login an...

CVE-2026-100533 OpenClaw before 2026.8.1 Path Traversal via Unicode Fallback

OpenClaw versions before 2026.8.1 contain a path traversal vulnerability in the tools.fs.workspaceOnly feature where Unicode filename fallback can normalize validated parent directory components. Admitted requesters can exploit canonically equivalent sibling directories to read files outside the...

CVE-2026-100533

OpenClaw versions prior to 2026.8.1 are vulnerable to a path traversal vulnerability within the tools.fs.workspaceOnly feature. The root cause is a Unicode filename fallback that can normalize validated parent directory components, allowing admitted requesters to exploit canonically equivalent si...

CVE-2026-100532 openclaw WhatsApp before 2026.8.1 Authentication Bypass

@openclaw/whatsapp npm before 2026.8.1 exposes the WhatsApp login tool through the generic channel-tool path without preserving the originating sender's owner status, so the owner-only tool boundary is not enforced. An admitted non-owner sender able to steer the tool can request a forced login an...

CVE-2026-100533 OpenClaw before 2026.8.1 Path Traversal via Unicode Fallback

OpenClaw versions before 2026.8.1 contain a path traversal vulnerability in the tools.fs.workspaceOnly feature where Unicode filename fallback can normalize validated parent directory components. Admitted requesters can exploit canonically equivalent sibling directories to read files outside the...

EUVD-2026-87518

@openclaw/whatsapp npm before 2026.8.1 exposes the WhatsApp login tool through the generic channel-tool path without preserving the originating sender's owner status, so the owner-only tool boundary is not enforced. An admitted non-owner sender able to steer the tool can request a forced login an...

EUVD-2026-87517

OpenClaw versions before 2026.8.1 contain a path traversal vulnerability in the tools.fs.workspaceOnly feature where Unicode filename fallback can normalize validated parent directory components. Admitted requesters can exploit canonically equivalent sibling directories to read files outside the...

CVE-2026-100532

The @openclaw/whatsapp (npm) package, in versions prior to 2026.8.1 , contains a vulnerability where the WhatsApp login tool is exposed via the generic channel-tool path. The flaw occurs because the system fails to preserve the originating sender's owner status, leading to a bypass of the owner-o...

CVE-2026-100532 openclaw WhatsApp before 2026.8.1 Authentication Bypass

@openclaw/whatsapp npm before 2026.8.1 exposes the WhatsApp login tool through the generic channel-tool path without preserving the originating sender's owner status, so the owner-only tool boundary is not enforced. An admitted non-owner sender able to steer the tool can request a forced login an...

CVE-2026-100533 OpenClaw before 2026.8.1 Path Traversal via Unicode Fallback

OpenClaw versions before 2026.8.1 contain a path traversal vulnerability in the tools.fs.workspaceOnly feature where Unicode filename fallback can normalize validated parent directory components. Admitted requesters can exploit canonically equivalent sibling directories to read files outside the...

EUVD-2026-87519

The @openclaw/slack npm package before 2026.8.1 contains an authorization flaw in its Slack download-file handler: when a file lacks the share metadata used to prove it belongs to the requested conversation, the conversation-authorization check fails open. An authenticated caller restricted to a...

CVE-2026-100531 openclaw Slack before 2026.8.1 Authorization Bypass

The @openclaw/slack npm package before 2026.8.1 contains an authorization flaw in its Slack download-file handler: when a file lacks the share metadata used to prove it belongs to the requested conversation, the conversation-authorization check fails open. An authenticated caller restricted to a...

CVE-2026-100531 openclaw Slack before 2026.8.1 Authorization Bypass

The @openclaw/slack npm package before 2026.8.1 contains an authorization flaw in its Slack download-file handler: when a file lacks the share metadata used to prove it belongs to the requested conversation, the conversation-authorization check fails open. An authenticated caller restricted to a...

CVE-2026-100531

The @openclaw/slack npm package (versions before 2026.8.1 ) contains an authorization flaw in the Slack download-file handler . The vulnerability occurs because the conversation-authorization check fails open when a file lacks the share metadata required to prove it belongs to a specific conversa...

CVE-2026-100531

The @openclaw/slack npm package before 2026.8.1 contains an authorization flaw in its Slack download-file handler: when a file lacks the share metadata used to prove it belongs to the requested conversation, the conversation-authorization check fails open. An authenticated caller restricted to a...

CVE-2026-100531 openclaw Slack before 2026.8.1 Authorization Bypass

The @openclaw/slack npm package before 2026.8.1 contains an authorization flaw in its Slack download-file handler: when a file lacks the share metadata used to prove it belongs to the requested conversation, the conversation-authorization check fails open. An authenticated caller restricted to a...

EUVD-2026-87520

OpenClaw versions before 2026.8.1 fail to bind working directory context to reusable exec approvals, allowing approved commands to execute in different directories. Attackers with an allow-always approval can reuse it to run the same command against unreviewed files or repositories with materiall...