CVE-2026-100529 — OpenClaw before 2026.8.1 Authorization Scope Widening via File-Transfer
OpenClaw versions before 2026.8.1 contain an authorization scope widening vulnerability in file-transfer allow-always approvals that allows attackers to reuse standing grants fo…
Published: 2026-09-26 · CVSS: 7.4 · CVSS 4.0
OpenClaw versions before 2026.8.1 contain an authorization scope widening vulnerability in file-transfer allow-always approvals that allows attackers to reuse standing grants for unreviewed paths. Attackers can exploit glob metacharacter interpretation and node display name reuse to access sibling paths or different nodes beyond the operator's original approval scope.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7