rootpwn

medium · CVSS v3 4.2 · CVSS v4 2.3 · EPSS 0.00216

CVE-2026-100554

OpenClaw npm package fails to immediately revoke Canvas HTTP authorization when a paired node is revoked, allowing the node to continue acce

Overview

OpenClaw npm package fails to immediately revoke Canvas HTTP authorization when a paired node is revoked, allowing the node to continue accessing configured routes until WebSocket cleanup completes. This flaw permits continued use of Canvas capabilities during the close grace period. The issue is fixed in version 2026.8.1.

Description

OpenClaw (npm package 'openclaw') versions >= 2026.5.12 and < 2026.8.1 do not immediately invalidate Canvas HTTP authorization when a paired node is revoked. Node revocation invalidates the WebSocket client, but Canvas HTTP authorization continues to accept and renew the previously granted capability until WebSocket close cleanup completes. As a result, a revoked paired node can continue exercising its Canvas capability against the capability's configured routes during the close grace period. The issue is fixed in 2026.8.1; as a workaround, restart the Gateway after revoking a node that has Canvas access.

Impact

Confidentiality: a revoked node can still read or write data via Canvas routes, exposing sensitive information. Integrity: the node may perform unauthorized actions on the system. Availability: not directly affected. Defenders: developers using OpenClaw and system administrators managing node revocations should be aware.

Remediation

Upgrade to OpenClaw 2026.8.1 or later. If an upgrade is not immediately possible, restart the Gateway immediately after revoking any node that has Canvas access to trigger the cleanup process.

Risk context

The vulnerability has a medium CVSS score of 4.2 and an EPSS of 0.00216, indicating a low likelihood of exploitation but still requiring attention. Defenders should act promptly but the urgency is moderate.

Affected products

  • OpenClaw
  • openclaw npm package
  • Canvas Gateway
  • Node.js application
  • WebSocket client
  • Canvas HTTP authorization

Scores

Severity
medium
CVSS v2
3.6
CVSS v3
4.2
CVSS v4
2.3
EPSS
0.00216

OpenClaw npm Canvas revocation WebSocket authorization medium EPSS

← All CVEs

Related CVEs

medium

CVE-2026-11871

The Team Members WordPress plugin through 9.2 does not perform any authorization or visibility check in an unauthenticated AJAX action that returns full team member records by ID, allowing unauthenticated attackers to enumerate and disclose details, including email addresses and phone numbers, of team members the administrator has not published publicly.

View analysis

medium

CVE-2026-100604

ClawHub (openclaw/clawhub) contains an incorrect authorization vulnerability in the ClawHub application/backend: an organization-owned skill retains the ownerUserId of its original publisher, and transfer and lifecycle authorization checks trust that historical user before requiring current organization privileges. An authenticated user who originally published an organization skill can therefore transfer, delete, or restore that skill — taking control of its trusted name and history — even after their organization privileges have been revoked or downgraded. The issue was confirmed at revision cbfee7343ddc867316dd9b3de6fa8856730f9f41; the complete historical affected range was not established. It is fixed by PR #3680, included in revision 8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650, which was deployed to clawhub.ai on 2026-09-11; self-hosted deployments should update to that revision or a later descendant. The npm CLI and OpenClaw runtime are separate products and are not affected.

View analysis

medium

CVE-2026-100503

Ghidra versions through 12.1.4 contain a heap use-after-free vulnerability in the decompiler's Funcdata::opInsertAfter function caused by stale INDIRECT effect-op references. Attackers can craft a malicious binary with a specific x86-64 sequence that triggers the vulnerability during decompilation, causing the decompile helper process to crash and denying service to analysts and automated analysis pipelines.

View analysis

medium

CVE-2026-100505

Ghidra versions 11.2 through 12.1.4 contain a heap out-of-bounds read vulnerability in StringManager::getCodepoint when decoding multi-byte UTF-8, UTF-16, or UTF-32 characters without validating remaining buffer length. Attackers can craft malicious binaries with constant byte stores ending in multi-byte lead units to trigger out-of-bounds reads that crash the decompiler or leak adjacent heap memory into decompiled output.

View analysis