CVE-2026-100596

OpenClaw versions before 2026.7.1 fail to properly authorize non-owner users executing MCP configuration changes through /mcp set and /mcp unset commands. Attackers can persist arbitrary stdio MCP commands that execute with OpenClaw process privileges when configuration loads, compromising host confidentiality, integrity, and availability.

Score

CVSS 3.1 8.8 High

Status

Deferred - disclosure@vulncheck.com

Published

2026-09-26

Last modified

2026-10-05

Weaknesses

CWE-862

Affected products

• Openclaw (Openclaw)

References

• https://github.com/openclaw/openclaw/security/advisories/GHSA-wwx7-573h-pqwc
• https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-mcp-configuration