CVE-2026-100538

OpenClaw npm package 'openclaw' before 2026.8.1 does not apply the originating sender's global or per-agent toolsBySender policy when handling outbound attachments. A sender that has been explicitly denied filesystem read tools can still cause a known local file to be read and returned via a...

CVE-2026-100538 OpenClaw before 2026.8.1 Local File Read via Outbound Attachments

OpenClaw npm package 'openclaw' before 2026.8.1 does not apply the originating sender's global or per-agent toolsBySender policy when handling outbound attachments. A sender that has been explicitly denied filesystem read tools can still cause a known local file to be read and returned via a...

CVE-2026-100538

The OpenClaw npm package (openclaw ) versions before 2026.8.1 is vulnerable to a local file read due to a failure to apply the sender's toolsBySender policy when processing outbound attachments. An attacker who is explicitly denied filesystem read tools can still trigger a read of a known local f...

EUVD-2026-87512

OpenClaw npm package 'openclaw' before 2026.8.1 does not apply the originating sender's global or per-agent toolsBySender policy when handling outbound attachments. A sender that has been explicitly denied filesystem read tools can still cause a known local file to be read and returned via a...

CVE-2026-100538

OpenClaw npm package 'openclaw' before 2026.8.1 does not apply the originating sender's global or per-agent toolsBySender policy when handling outbound attachments. A sender that has been explicitly denied filesystem read tools can still cause a known local file to be read and returned via a...

CVE-2026-100538 OpenClaw before 2026.8.1 Local File Read via Outbound Attachments

OpenClaw npm package 'openclaw' before 2026.8.1 does not apply the originating sender's global or per-agent toolsBySender policy when handling outbound attachments. A sender that has been explicitly denied filesystem read tools can still cause a known local file to be read and returned via a...

CVE-2026-100538 OpenClaw before 2026.8.1 Local File Read via Outbound Attachments

OpenClaw npm package 'openclaw' before 2026.8.1 does not apply the originating sender's global or per-agent toolsBySender policy when handling outbound attachments. A sender that has been explicitly denied filesystem read tools can still cause a known local file to be read and returned via a...

PT-2026-99175

Name of the Vulnerable Software and Affected Versions openclaw versions prior to 2026.8.1 Description The software fails to apply the global or per-agent toolsBySender policy when processing outbound attachments. This allows a sender who has been denied filesystem read tools to trigger the readin...

CVE-2026-42438: Incorrect Authorization

OpenClaw versions 2026.4.9 before 2026.4.10 contain a sender policy bypass vulnerability in the outbound host-media attachment read helper that allows unauthorized local file disclosure. Attackers with denied read access via toolsBySender or group policy can trigger host-media attachment loading ...

EUVD-2026-13326

OpenClaw versions prior to 2026.2.22 contain an authorization bypass vulnerability in the toolsBySender group policy matching that allows attackers to inherit elevated tool permissions through identifier collision attacks. Attackers can exploit untyped sender keys by forcing collisions with mutab...

CVE-2026-32039 OpenClaw < 2026.2.22 - Sender Authorization Bypass via Identity Collision in toolsBySender

OpenClaw versions prior to 2026.2.22 contain an authorization bypass vulnerability in the toolsBySender group policy matching that allows attackers to inherit elevated tool permissions through identifier collision attacks. Attackers can exploit untyped sender keys by forcing collisions with mutab...

CVE-2026-32039: Authorization Bypass Through User-Controlled Key

OpenClaw versions prior to 2026.2.22 contain an authorization bypass vulnerability in the toolsBySender group policy matching that allows attackers to inherit elevated tool permissions through identifier collision attacks. Attackers can exploit untyped sender keys by forcing collisions with mutab...

PT-2026-25498

Summary channels..groups..toolsBySender could match a privileged sender policy using a colliding mutable identity value for example senderName or senderUsername when deployments used untyped keys. The fix introduces explicit typed sender keys id:, e164:, username:, name:, keeps legacy untyped key...