CVE-2026-100596 — OpenClaw before 2026.7.1 Authorization Bypass via MCP Configuration
OpenClaw versions before 2026.7.1 fail to properly authorize non-owner users executing MCP configuration changes through /mcp set and /mcp unset commands. Attackers can persist …
Published: 2026-09-26 · CVSS: 8.7 · CVSS 4.0
OpenClaw versions before 2026.7.1 fail to properly authorize non-owner users executing MCP configuration changes through /mcp set and /mcp unset commands. Attackers can persist arbitrary stdio MCP commands that execute with OpenClaw process privileges when configuration loads, compromising host confidentiality, integrity, and availability.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7