CVE-2026-100595
MEDIUM
NVD
CVSS Score
6.5
Severity
MEDIUM
Published
Sep 26, 2026
Vendor
unknown
Description
OpenClaw versions before 2026.7.1 contain an authorization bypass vulnerability in the diagnostics export command that allows non-owner channel senders to access owner-only host diagnostic bundles. Attackers can request and receive diagnostic details about the host, configuration, runtime, and connected services intended only for owners.