CVE-2026-100540
MEDIUM
NVD
CVSS Score
6.8
Severity
MEDIUM
Published
Sep 26, 2026
Vendor
unknown
Description
OpenClaw Feishu before 2026.8.1 fails to validate whether a configured default account is disabled before selecting it for model tool operations. Attackers can exploit multi-account setups where a disabled default account retains credentials to read or modify Feishu resources through a revoked identity.