rootpwn

medium · CVSS v3 4.3 · CVSS v4 5.3 · EPSS 0.00215

CVE-2026-100553

OpenClaw versions 2026.6.9 through 2026.8.0 allow an authenticated user to unpin a message in another Feishu group by bypassing the cross‑co

Overview

OpenClaw versions 2026.6.9 through 2026.8.0 allow an authenticated user to unpin a message in another Feishu group by bypassing the cross‑context target check. The flaw is limited to message mutation and does not affect group membership or message content. It is fixed in OpenClaw 2026.8.1.

Description

OpenClaw versions >= 2026.6.9 and < 2026.8.1 do not declare the native chatId parameter as a delivery target in the Feishu unpin feature, so unpin requests can bypass the shared same-provider cross-context target check. When tools.message.crossContext.allowWithinProvider is disabled, an admitted (authenticated) sender can remove a pin from another Feishu group that the sender and the configured account are otherwise permitted to access, bypassing the intended cross-context message mutation policy. Feishu membership and group authorization still apply, and the demonstrated impact is limited to message mutation (pin removal). The issue is fixed in 2026.8.1.

Impact

Confidentiality is not affected. Integrity is impacted because an authorized user can remove a pin from a group they normally cannot modify, potentially disrupting group communication. Availability is not affected. Defenders should monitor unpin activity and enforce least‑privilege policies for group management.

Remediation

Apply the OpenClaw 2026.8.1 patch or later. Until the patch is applied, enable the tools.message.crossContext.allowWithinProvider setting to prevent cross‑context unpin operations, or restrict unpin permissions to trusted users only.

Risk context

The vulnerability has a medium severity (CVSS v3 4.3, v4 5.3) and a very low EPSS score of 0.00215, indicating a low likelihood of exploitation but still requiring timely patching.

Affected products

  • OpenClaw
  • Feishu

Scores

Severity
medium
CVSS v2
4
CVSS v3
4.3
CVSS v4
5.3
EPSS
0.00215

Feishu OpenClaw message-mutation cross-context medium-severity EPSS-low patch-required

← All CVEs

Related CVEs

medium

CVE-2026-11871

The Team Members WordPress plugin through 9.2 does not perform any authorization or visibility check in an unauthenticated AJAX action that returns full team member records by ID, allowing unauthenticated attackers to enumerate and disclose details, including email addresses and phone numbers, of team members the administrator has not published publicly.

View analysis

medium

CVE-2026-100604

ClawHub (openclaw/clawhub) contains an incorrect authorization vulnerability in the ClawHub application/backend: an organization-owned skill retains the ownerUserId of its original publisher, and transfer and lifecycle authorization checks trust that historical user before requiring current organization privileges. An authenticated user who originally published an organization skill can therefore transfer, delete, or restore that skill — taking control of its trusted name and history — even after their organization privileges have been revoked or downgraded. The issue was confirmed at revision cbfee7343ddc867316dd9b3de6fa8856730f9f41; the complete historical affected range was not established. It is fixed by PR #3680, included in revision 8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650, which was deployed to clawhub.ai on 2026-09-11; self-hosted deployments should update to that revision or a later descendant. The npm CLI and OpenClaw runtime are separate products and are not affected.

View analysis

medium

CVE-2026-100503

Ghidra versions through 12.1.4 contain a heap use-after-free vulnerability in the decompiler's Funcdata::opInsertAfter function caused by stale INDIRECT effect-op references. Attackers can craft a malicious binary with a specific x86-64 sequence that triggers the vulnerability during decompilation, causing the decompile helper process to crash and denying service to analysts and automated analysis pipelines.

View analysis

medium

CVE-2026-100505

Ghidra versions 11.2 through 12.1.4 contain a heap out-of-bounds read vulnerability in StringManager::getCodepoint when decoding multi-byte UTF-8, UTF-16, or UTF-32 characters without validating remaining buffer length. Attackers can craft malicious binaries with constant byte stores ending in multi-byte lead units to trigger out-of-bounds reads that crash the decompiler or leak adjacent heap memory into decompiled output.

View analysis