CVE-2026-100525: OpenClaw diagnostics-prometheus before 2026.9.3 Authentication Bypass

Severity: medium (CVSS 4.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-09-26 · updated 2026-10-08
Weakness: CWE-862

Description

The OpenClaw Prometheus diagnostics plugin (@openclaw/diagnostics-prometheus) before version 2026.9.3 does not enforce the operator.read scope on its authenticated metrics endpoint. In deployments using an identity-bearing Gateway authentication mode such as trusted-proxy, a caller whose effective role has no read scope can retrieve the diagnostics document even though ordinary read methods reject the same identity, disclosing operational metrics to an authenticated profile intentionally limited below read access. Shared-secret Gateway callers already hold the documented full operator scope and are not affected. The issue is fixed in 2026.9.3; as a workaround, disable the Prometheus endpoint or ensure every identity that can reach it is intended to hold operator.read.

Affected products

openclaw diagnostics-prometheus: before 2026.9.3 — fixed in 2026.9.3

How to fix

Upgrade to a fixed version: openclaw diagnostics-prometheus 2026.9.3. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-100525 or the next vulnerability affects your stack