Threats affecting pkg:npm/@openclaw/whatsapp

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.2	EPSS 0.3%	CVE-2026-100532openclaw whatsapp · Missing Authorization High7.2EPSS 0.3%2026-09-26CVE Database V5CVE-2026-100532 A missing authorization vulnerability in @openclaw/whatsapp (npm) before version 2026.8.1 allows non-owner users to access an owner-only WhatsApp login tool. This flaw lets attackers request a forced login and obtain a new QR code for a configured account, disconnecting the Gateway's WhatsApp account and causing availability loss. Full account takeover requires scanning the QR code with another device. The issue is fixed in version 2026.8.1. EPSS 0.3%Vulnerability #ghsa-wh2c-24c2-x93p	CVE Database V5	2026-09-26

Page 1 of 1