Threats tagged 'ghsa-wh2c-24c2-x93p'

1 threat

Threats tagged 'ghsa-wh2c-24c2-x93p'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.2	EPSS 0.3%	CVE-2026-100532whatsapp · Missing Authorization High7.2EPSS 0.3%2026-09-26CVE Database V5CVE-2026-100532 A missing authorization vulnerability in @openclaw/whatsapp (npm) before version 2026.8.1 allows non-owner users to access an owner-only WhatsApp login tool. This flaw lets attackers request a forced login and obtain a new QR code for a configured account, disconnecting the Gateway's WhatsApp account and causing availability loss. Full account takeover requires scanning the QR code with another device. The issue is fixed in version 2026.8.1. EPSS 0.3%Vulnerability openclaw #ghsa-wh2c-24c2-x93p	CVE Database V5	2026-09-26

Showing 1–1 of 1 result