OpenClaw versions before 2026.7.1 contain an authorization bypass vulnerability in the diagnostics export command that allows non-owner channel… (CVE-2026-100595)
OpenClaw versions before 2026.7.1 have an authorization bypass vulnerability in the diagnostics export command. This flaw allows non-owner channel senders to access diagnostic bundles intended only for owners, exposing sensitive host, configuration, runtime, and connected services information. The vulnerability has a CVSS 3.1 score of 6.5, indicating a high severity impact on confidentiality without affecting integrity or availability.
AI Analysis
Technical Summary
CVE-2026-100595 describes an authorization bypass vulnerability in OpenClaw's diagnostics export command present in versions before 2026.7.1. This vulnerability permits non-owner channel senders to request and receive diagnostic bundles that should be restricted to owners only. These bundles contain detailed diagnostic information about the host system, its configuration, runtime environment, and connected services. The vulnerability is rated high severity with a CVSS 3.1 base score of 6.5, reflecting network attack vector, low attack complexity, required privileges, no user interaction, and high confidentiality impact.
Potential Impact
An attacker with the ability to send commands on a non-owner channel can bypass authorization controls and access sensitive diagnostic information intended only for owners. This exposure could lead to information disclosure about the host system and its environment, potentially aiding further attacks. There is no indication of impact on integrity or availability.
Mitigation Recommendations
A fix is available in OpenClaw version 2026.7.1. Users should upgrade to this version or later to remediate the vulnerability. Since the product is not a cloud service, remediation depends on user action to apply the update. No other mitigation guidance is provided.
OpenClaw versions before 2026.7.1 contain an authorization bypass vulnerability in the diagnostics export command that allows non-owner channel… (CVE-2026-100595)
Description
OpenClaw versions before 2026.7.1 have an authorization bypass vulnerability in the diagnostics export command. This flaw allows non-owner channel senders to access diagnostic bundles intended only for owners, exposing sensitive host, configuration, runtime, and connected services information. The vulnerability has a CVSS 3.1 score of 6.5, indicating a high severity impact on confidentiality without affecting integrity or availability.
CVSS v3.1
Score 6.5medium
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-100595 describes an authorization bypass vulnerability in OpenClaw's diagnostics export command present in versions before 2026.7.1. This vulnerability permits non-owner channel senders to request and receive diagnostic bundles that should be restricted to owners only. These bundles contain detailed diagnostic information about the host system, its configuration, runtime environment, and connected services. The vulnerability is rated high severity with a CVSS 3.1 base score of 6.5, reflecting network attack vector, low attack complexity, required privileges, no user interaction, and high confidentiality impact.
Potential Impact
An attacker with the ability to send commands on a non-owner channel can bypass authorization controls and access sensitive diagnostic information intended only for owners. This exposure could lead to information disclosure about the host system and its environment, potentially aiding further attacks. There is no indication of impact on integrity or availability.
Mitigation Recommendations
A fix is available in OpenClaw version 2026.7.1. Users should upgrade to this version or later to remediate the vulnerability. Since the product is not a cloud service, remediation depends on user action to apply the update. No other mitigation guidance is provided.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-cq6m-mhgc-vqrg
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-100595"]
- Database Specific Severity
- HIGH
- Cvss Version
- 3.1
Threat ID: 6ab74f24f7a7c54106e12ec3
Added to database: 09/26/2026, 04:50:44 UTC
Last enriched: 09/26/2026, 04:52:35 UTC
Last updated: 09/26/2026, 05:24:00 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.