Threats tagged 'ghsa-2gwv-q898-554m'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.8	EPSS 0.2%	CVE-2026-100596OpenClaw versions before 2026.7.1 fail to properly authorize non-owner users executing MCP configuration changes through /mcp set and /mcp unset commands High8.8EPSS 0.2%2026-09-26GCVE DatabaseCVE-2026-100596 OpenClaw versions before 2026.7.1 fail to properly authorize non-owner users executing MCP configuration changes through /mcp set and /mcp unset commands. Attackers can persist arbitrary stdio MCP commands that execute with OpenClaw process privileges when configuration loads, compromising host confidentiality, integrity, and availability. EPSS 0.2%Vulnerability CWE-862 #ghsa-2gwv-q898-554m	GCVE Database	2026-09-26

Page 1 of 1