Threats tagged 'ghsa-x2gp-w9p4-cpwg'

1 threat

Threats tagged 'ghsa-x2gp-w9p4-cpwg'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.1	EPSS 0.2%	CVE-2026-100582msteams · Missing Authorization High7.1EPSS 0.2%2026-09-26CVE Database V5CVE-2026-100582 OpenClaw channel plugins prior to version 2026.8.1 do not enforce the configured channel read allowlist for certain read actions, allowing lower-trust senders or agents to access content or metadata from channels excluded by the operator's read policy. This vulnerability affects @openclaw/msteams and related plugins and is fixed in version 2026.8.1. EPSS 0.2%Vulnerability openclaw #ghsa-x2gp-w9p4-cpwg	CVE Database V5	2026-09-26

Showing 1–1 of 1 result