High
OpenClaw before 2026.7.1 Authorization Bypass via chat.send
Type: advisorySource: Official CVE List
OpenClaw (npm package openclaw) before 2026.7.1 fails to restrict owner-only infrastructure tools exposed through the chat.send endpoint. In Gateway deployments using authentication modes that honor caller identity an…
Products: OpenClawCVEs: CVE-2026-100578