# CVE-2026-100604: ClawHub incorrect authorization in organization skill transfer

Source: https://junglewise.ai/threats/cve-2026-100604-clawhub-openclaw-clawhub-contains-an-incorrect-authorization  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-26. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-100604 · Severity: medium · CVSS 5.4 · Published 2026-09-26

ClawHub is a platform for managing reusable code skills within organizations. A former employee or user who originally published an organization skill can still transfer, delete, or restore that skill after their access has been revoked, maintaining control over its trusted name and history. This allows unauthorized takeover of organization assets by individuals who no longer have the right to do so.

Technologies: [Openclaw ClawHub](https://junglewise.ai/threats/technologies/clawhub). Vendors: [Openclaw](https://junglewise.ai/threats/vendors/openclaw).

## Quick answers

**Is CVE-2026-100604 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-100604 being exploited in the wild.

**How severe is CVE-2026-100604?** Medium severity, with a CVSS score of 5.4, published 26 September 2026.

**Which products and versions are affected?** Openclaw ClawHub prior to revision 8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650.

**Is there a fix for CVE-2026-100604?** A patch was published on 2026-09-11: PR #3680 merged in revision 8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-100604 attacked?** It is attacked over the network, in a web application.

**Am I affected by CVE-2026-100604?** Check whether you run Openclaw ClawHub at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is an incorrect authorization check (CWE-863) in the skill transfer and lifecycle endpoints. Organization-owned skills retain the ownerUserId of their original publisher, and authorization checks trust that historical user ID before validating current organization privileges. An authenticated former publisher can exploit this to transfer, delete, or restore skills even after organization role downgrade or revocation. The fix validates current organization privileges before allowing these operations.

## Affected products

- OpenClaw ClawHub prior to revision 8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650

## Timeline

- 2026-09-11: disclosed: Fix deployed to clawhub.ai
- 2026-09-11: patched: PR #3680 merged in revision 8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650
- 2026-09-26: advisory: CVE-2026-100604 published

## References

- [https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650](https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650)
- [https://github.com/openclaw/clawhub/security/advisories/GHSA-9558-q4f9-324f](https://github.com/openclaw/clawhub/security/advisories/GHSA-9558-q4f9-324f)

## Related threats

- [ClawHub application backend authorization bypass in skill report moderation](https://junglewise.ai/threats/cve-2026-100603-clawhub-openclaw-clawhub-application-backend-contains-a-flaw-in)
- [ClawHub missing authorization check in changelog preview](https://junglewise.ai/threats/cve-2026-100602-clawhub-openclaw-clawhub-application-backend-contains-a-missing)
- [ClawHub server-side request forgery in profile image preview](https://junglewise.ai/threats/cve-2026-100601-clawhub-openclaw-clawhub-application-backend-contains-a-server)
- [ClawHub anonymous API quota exhaustion and identity spoofing](https://junglewise.ai/threats/cve-2026-100600-clawhub-the-openclaw-clawhub-application-backend-does-not-bind)