Medium severity6.5NVD Advisory· Published Sep 26, 2026· Updated Sep 28, 2026
CVE-2026-100595
CVE-2026-100595
Description
OpenClaw versions before 2026.7.1 contain an authorization bypass vulnerability in the diagnostics export command that allows non-owner channel senders to access owner-only host diagnostic bundles. Attackers can request and receive diagnostic details about the host, configuration, runtime, and connected services intended only for owners.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
2News mentions
1- OpenClaw: 25 Authorization Bypass and Access Control Vulnerabilities Disclosed TogetherVypr Intelligence · Sep 26, 2026