High
ClawHub Changelog Preview Information Disclosure via Authorization Bypass
Type: advisorySource: Official CVE List
ClawHub (openclaw/clawhub application/backend) contains a missing authorization check in the changelog preview feature. A signed-in caller can invoke the public skills:generateChangelogPreview action for a skill they…
Products: clawhubCVEs: CVE-2026-100602