2 matches found
CVE-2026-100528
OpenClaw npm package 'openclaw' before 2026.8.1 could send third-party provider credentials to the wrong endpoint. In affected versions, when a third-party provider uses an OpenAI-compatible API and the resolved model metadata lacks a concrete base URL, a pinned session that continues after a mod...
5.9CVSS0.00243EPSS
SaveExploits0References2
CVE-2026-100528 OpenClaw before 2026.8.1 Credential Disclosure via Provider Endpoint
OpenClaw npm package 'openclaw' before 2026.8.1 could send third-party provider credentials to the wrong endpoint. In affected versions, when a third-party provider uses an OpenAI-compatible API and the resolved model metadata lacks a concrete base URL, a pinned session that continues after a mod...
5.9CVSS5.8AI score
SaveExploits0References4
20