What’s Vulnerable › Vulnerabilities

CVE-2026-100585: OpenClaw before 2026.7.1 Authentication Bypass via MCP Channel

• Severity: high (CVSS 8.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-26 · updated 2026-09-30
• Weakness: CWE-862

Description

OpenClaw (npm package `openclaw`) before 2026.7.1 fails to enforce the owner-only authorization requirement for Claude Code permission prompts delivered through the MCP channel bridge. An authorized non-owner channel sender with channel command access can approve or deny a pending permission request intended for the owner, causing the requested action to proceed without owner consent. The practical impact depends on the pending action and the host capabilities requested by the Claude Code run. The issue is fixed in version 2026.7.1.

Affected products

• OpenClaw: before 2026.7.1 — fixed in 2026.7.1

How to fix

Upgrade to a fixed version: OpenClaw 2026.7.1. Check the vendor advisory for mitigations.

References

• https://github.com/openclaw/openclaw/security/advisories/GHSA-p5g8-m35v-7m82
• https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-mcp-channel

Get alerted when CVE-2026-100585 or the next vulnerability affects your stack