https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T12:35:58.512496+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-100557 CVE-2026-100557 — OpenClaw before 2026.8.1 Authorization Bypass via Skill Tool Dispatch 2026-09-28T12:35:58.513734+00:00

Affected: OpenClaw

OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in skill tool dispatch that fails to carry the sender's owner status. Non-owner senders authorized to invoke skill commands can access owner-only tools and server credentials reserved for owners.