Threats affecting pkg:github/openclaw/feishu

CVE-2026-100540 is an authorization vulnerability in OpenClaw Feishu versions before 2026.8.1. The software fails to check if a configured default account is disabled before using it for model tool operations. This flaw allows attackers exploiting multi-account setups to use credentials of a disabled default account to read or modify Feishu resources despite the account being revoked.