# CVE-2026-100540: OpenClaw Feishu authorization check bypass in account validation

Source: https://junglewise.ai/threats/cve-2026-100540-openclaw-feishu-before-2026-8-1-fails-to-validate-whether-a  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-26. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-100540 · Severity: medium · CVSS 6.8 · Published 2026-09-26

OpenClaw Feishu is a tool integration library that allows models to interact with Feishu (a workplace collaboration platform) to read and modify resources. The vulnerability allows attackers to exploit multi-account setups by using a disabled account's credentials to access Feishu resources that an administrator intended to revoke, potentially leading to unauthorized data access or modification.

Technologies: [Openclaw Feishu](https://junglewise.ai/threats/technologies/feishu). Vendors: [Openclaw](https://junglewise.ai/threats/vendors/openclaw).

## Quick answers

**Is CVE-2026-100540 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-100540 being exploited in the wild.

**How severe is CVE-2026-100540?** Medium severity, with a CVSS score of 6.8, published 26 September 2026.

**Which products and versions are affected?** Openclaw Feishu before 2026.8.1.

**Is there a fix for CVE-2026-100540?** A patch was published on 2026-08-01: Patched version 2026.8.1 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-100540 attacked?** It is attacked over the network.

**Am I affected by CVE-2026-100540?** Check whether you run Openclaw Feishu at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The Feishu model tool fails to validate whether a configured default account is disabled before selecting it for operations, a classic authorization check bypass (CWE-863). In multi-account setups, a disabled default account can retain its credentials and be used for tool invocations while an enabled sibling account keeps the tool family available. Exploitation requires a specific configuration where both disabled and enabled sibling accounts exist, and an attacker can trigger model tool calls.

## Affected products

- OpenClaw Feishu before 2026.8.1

## Timeline

- 2026-09-26: disclosed
- 2026-08-01: patched: Patched version 2026.8.1

## References

- [https://github.com/openclaw/openclaw/security/advisories/GHSA-h2qg-fxpv-82v6](https://github.com/openclaw/openclaw/security/advisories/GHSA-h2qg-fxpv-82v6)
- [https://www.vulncheck.com/advisories/openclaw-feishu-before-2026.8.1-authentication-bypass-via-disabled-account](https://www.vulncheck.com/advisories/openclaw-feishu-before-2026.8.1-authentication-bypass-via-disabled-account)

## Related threats

- [OpenClaw feishu incorrect authorization in permission tools](https://junglewise.ai/threats/cve-2026-62188-openclaw-feishu-incorrect-authorization-in-permission-tools)
- [OpenClaw Feishu tools authorization bypass in per-account disablement](https://junglewise.ai/threats/cve-2026-62187-openclaw-feishu-tools-authorization-bypass-in-per-account)