Quick answers
- Is CVE-2026-100578 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-100578 being exploited in the wild.
- How severe is CVE-2026-100578?
- High severity, with a CVSS score of 7.6, published 26 September 2026.
- Which products and versions are affected?
- Openclaw before 2026.7.1.
- Is there a fix for CVE-2026-100578?
- A patch was published on 2026-07-01: Fix available in version 2026.7.1 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
- How is CVE-2026-100578 attacked?
- It is attacked over the network, in a software library.
- Am I affected by CVE-2026-100578?
- Check whether you run Openclaw at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
The vulnerability is an authorization bypass (CWE-862, CWE-269) in the chat.send endpoint that fails to properly restrict tool access based on caller identity and privilege level. A write-scoped non-owner caller can initiate a chat turn with an inflated tool inventory including owner-only gateway and cron tools, leading to unintended execution of privileged operations. The attack requires network access and valid non-owner credentials in identity-bearing deployments, with practical impact depending on which tools the model selects and caller steering capability.
Affected products
- OpenClaw openclaw before 2026.7.1
Timeline
- 2026-09-11: disclosed: GitHub Security Advisory GHSA-qw7m-h363-33qw published
- 2026-09-26: advisory: NVD entry published
- 2026-07-01: patched: Fix available in version 2026.7.1