# CVE-2026-100602: ClawHub missing authorization check in changelog preview

Source: https://junglewise.ai/threats/cve-2026-100602-clawhub-openclaw-clawhub-application-backend-contains-a-missing  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-26. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-100602 · Severity: medium · CVSS 6.5 · Published 2026-09-26

ClawHub is a skill marketplace and AI tool development platform. An authenticated user can generate a changelog preview for skills they do not have permission to access, causing restricted content to be sent to an external AI provider and potentially leaked in the preview. This bypasses normal content authorization checks.

Technologies: [Openclaw ClawHub](https://junglewise.ai/threats/technologies/clawhub). Vendors: [Openclaw](https://junglewise.ai/threats/vendors/openclaw).

## Quick answers

**Is CVE-2026-100602 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-100602 being exploited in the wild.

**How severe is CVE-2026-100602?** Medium severity, with a CVSS score of 6.5, published 26 September 2026.

**Which products and versions are affected?** Openclaw ClawHub before revision 8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650.

**Is there a fix for CVE-2026-100602?** A patch was published on 2026-09-11: PR #3682 included in revision 8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-100602 attacked?** It is attacked over the network, in a web application.

**Am I affected by CVE-2026-100602?** Check whether you run Openclaw ClawHub at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

Missing authorization check in the skills:generateChangelogPreview action allows authenticated attackers to bypass file-read authorization. The vulnerability permits reading up to 8,000 characters of quarantined (restricted) previous-version content and submitting it to an external AI provider. The attack requires authentication but no other preconditions; the fix adds authorization validation before processing preview requests.

## Affected products

- OpenClaw ClawHub before revision 8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650

## Timeline

- 2026-09-11: disclosed: Fixed and deployed to clawhub.ai
- 2026-09-26: advisory: Security advisory published
- 2026-09-11: patched: PR #3682 included in revision 8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650

## References

- [https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650](https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650)
- [https://github.com/openclaw/clawhub/security/advisories/GHSA-g3jp-jj55-jrcr](https://github.com/openclaw/clawhub/security/advisories/GHSA-g3jp-jj55-jrcr)

## Related threats

- [ClawHub incorrect authorization in organization skill transfer](https://junglewise.ai/threats/cve-2026-100604-clawhub-openclaw-clawhub-contains-an-incorrect-authorization)
- [ClawHub application backend authorization bypass in skill report moderation](https://junglewise.ai/threats/cve-2026-100603-clawhub-openclaw-clawhub-application-backend-contains-a-flaw-in)
- [ClawHub server-side request forgery in profile image preview](https://junglewise.ai/threats/cve-2026-100601-clawhub-openclaw-clawhub-application-backend-contains-a-server)
- [ClawHub anonymous API quota exhaustion and identity spoofing](https://junglewise.ai/threats/cve-2026-100600-clawhub-the-openclaw-clawhub-application-backend-does-not-bind)