rootpwn

medium · CVSS v3 6.3 · CVSS v4 5.3 · EPSS 0.00278

CVE-2026-100556

CVE-2026-100556 affects the OpenClaw npm package, allowing a command‑denied group member to override the provider and model used in a shared

Overview

CVE-2026-100556 affects the OpenClaw npm package, allowing a command‑denied group member to override the provider and model used in a shared session. This can alter routing, cost, and data flow without granting new execution privileges. The flaw is fixed in version 2026.8.1.

Description

OpenClaw (npm package openclaw) versions >= 2026.5.2 and command to reset the shared group session and persist a provider and model override. This allows a command-denied group member to select a provider and model already permitted by the operator for subsequent turns in the shared group session, potentially changing provider routing, cost, data flow, or availability. It does not allow adding a new provider or host command execution. The issue is fixed in version 2026.8.1.

Impact

The vulnerability compromises confidentiality, integrity, and availability of the shared session’s provider configuration. Defenders are impacted if they rely on OpenClaw for multi‑provider orchestration, as unauthorized members could redirect traffic or incur unexpected costs.

Remediation

Upgrade OpenClaw to version 2026.8.1 or later. If an upgrade is not immediately possible, restrict group member permissions to prevent provider/model selection or isolate the shared session from sensitive data flows.

Risk context

The issue carries a medium CVSS v3 score of 6.3 and an EPSS of 0.00278, indicating a low probability of exploitation but moderate potential impact if exploited.

Affected products

  • OpenClaw (npm package)

Scores

Severity
medium
CVSS v2
6.5
CVSS v3
6.3
CVSS v4
5.3
EPSS
0.00278

npm openclaw provider-override command-denied medium EPSS

← All CVEs

Related CVEs

medium

CVE-2026-86609

The Download Manager WordPress plugin before 7.5.6 does not sanitise and escape data submitted through its email-locked download subscription form before outputting it back in an admin page, which could allow unauthenticated attackers to perform Stored Cross-Site Scripting attacks against administrators. This affects the commercial Pro edition only; the free Download Manager WordPress plugin before 7.5.6 published under the same slug does not ship the affected feature.

View analysis

medium

CVE-2025-71422

CVE-2025-71422 affects Contrast Kubernetes runtime versions before 1.12.1. A malicious host can supply a crafted LUKS2 secure persistent volume whose metadata is not authenticated, causing the guest to open it with a null keyslot cipher and expose secret data. It matters because confidential-container workloads may lose confidentiality of data written to secure persistent volumes.

View analysis

medium

CVE-2025-71424

CVE-2025-71424 affects Edgeless Systems Contrast versions up to 1.9.0, a runtime for confidential containers on Kubernetes. On bare-metal deployments, an image that declares a Dockerfile VOLUME without a matching Kubernetes mount can allow the host to write files under that mount point inside the confidential container. This matters because it can corrupt application-critical directories and undermine the integrity guarantees of the workload.

View analysis

medium

CVE-2026-100724

CVE-2026-100724 affects http4k-core versions before 6.49.0.0, 5.42.0.0, and 4.51.0.0. Its reverseProxy and reverseProxyRouting functions can match Host headers using substring logic when multiple virtual hosts are configured. This matters when the functions are exposed as public inbound HTTP handlers because routing-based authorization can be bypassed.

View analysis