OpenClaw (npm package openclaw) before 2026.7.1 does not enforce the documented owner-only requirement for persistent /activation policy changes in… (CVE-2026-100593)
OpenClaw npm package versions before 2026.7.1 have a vulnerability where the enforcement of the documented owner-only restriction for persistent /activation policy changes in group channels is missing. This allows authorized non-owner channel senders to modify the agent's activation behavior, potentially causing it to respond more broadly or suppress expected activations until corrected by an owner. The issue is resolved in version 2026.7.1.
AI Analysis
Technical Summary
The OpenClaw npm package prior to version 2026.7.1 does not properly enforce the owner-only requirement for persistent changes to the /activation policy in group channels. As a result, authorized non-owner channel senders can alter whether the agent requires mention-based activation, which can cause the agent to respond more broadly to group traffic or suppress activation until an owner restores the intended setting. This vulnerability is tracked as CVE-2026-100593 and has a CVSS 3.1 base score of 5.4, indicating medium severity. The flaw is fixed in version 2026.7.1.
Potential Impact
An authorized non-owner in a group channel can change the agent's activation policy, causing it to respond more broadly to group messages or suppress expected activations. This could lead to unintended exposure of agent responses to additional group traffic or disruption of normal activation behavior until an owner corrects the setting. There is no indication of impact on confidentiality beyond limited information exposure, nor is there evidence of availability impact.
Mitigation Recommendations
Upgrade to OpenClaw version 2026.7.1 or later, where the issue is fixed. No other mitigations are indicated or required.
OpenClaw (npm package openclaw) before 2026.7.1 does not enforce the documented owner-only requirement for persistent /activation policy changes in… (CVE-2026-100593)
Description
OpenClaw npm package versions before 2026.7.1 have a vulnerability where the enforcement of the documented owner-only restriction for persistent /activation policy changes in group channels is missing. This allows authorized non-owner channel senders to modify the agent's activation behavior, potentially causing it to respond more broadly or suppress expected activations until corrected by an owner. The issue is resolved in version 2026.7.1.
CVSS v3.1
Score 5.4medium
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The OpenClaw npm package prior to version 2026.7.1 does not properly enforce the owner-only requirement for persistent changes to the /activation policy in group channels. As a result, authorized non-owner channel senders can alter whether the agent requires mention-based activation, which can cause the agent to respond more broadly to group traffic or suppress activation until an owner restores the intended setting. This vulnerability is tracked as CVE-2026-100593 and has a CVSS 3.1 base score of 5.4, indicating medium severity. The flaw is fixed in version 2026.7.1.
Potential Impact
An authorized non-owner in a group channel can change the agent's activation policy, causing it to respond more broadly to group messages or suppress expected activations. This could lead to unintended exposure of agent responses to additional group traffic or disruption of normal activation behavior until an owner corrects the setting. There is no indication of impact on confidentiality beyond limited information exposure, nor is there evidence of availability impact.
Mitigation Recommendations
Upgrade to OpenClaw version 2026.7.1 or later, where the issue is fixed. No other mitigations are indicated or required.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-hh5c-9248-jvc5
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-100593"]
- Database Specific Severity
- MODERATE
- Cvss Version
- 3.1
Threat ID: 6ab74f24f7a7c54106e12ec2
Added to database: 09/26/2026, 04:50:44 UTC
Last enriched: 09/26/2026, 04:52:31 UTC
Last updated: 09/26/2026, 05:43:47 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.