Threats tagged 'ghsa-26gh-65q7-rfpf'

1 threat

Threats tagged 'ghsa-26gh-65q7-rfpf'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.9	EPSS 0.2%	CVE-2026-100566line · Incorrect Authorization Medium6.9EPSS 0.2%2026-09-26CVE Database V5CVE-2026-100566 OpenClaw LINE versions before 2026.8.1 have an access control vulnerability where group allowlist mode incorrectly inherits direct message (DM) allowFrom values if groupAllowFrom is not explicitly set. This allows attackers who are members of a group to bypass intended group allowlist restrictions and trigger the agent when DM access is broader than group access. EPSS 0.2%Vulnerability openclaw #ghsa-26gh-65q7-rfpf	CVE Database V5	2026-09-26

Showing 1–1 of 1 result