CVE-2026-100582 json
OpenClaw Channel Plugins before 2026.8.1 Channel Read Allowlist Bypass
published 2026-09-26 44 d ago modified 2026-10-08 32 d ago also EUVD-2026-87469 , GHSA-g7fw-3gjp-g5hf
- cvss
- 6.5
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.2%
- EPSS 0.2% chance of exploitation in 30 days, percentile 11%
- public exploits
- 0
- none known
Summary
OpenClaw channel plugins (@openclaw/msteams, @openclaw/feishu, @openclaw/matrix, and @openclaw/googlechat) before 2026.8.1 do not enforce the configured channel read allowlist for caller-supplied explicit read targets in message, reaction, pin, member, and related metadata read actions. A lower-trust sender or a steered agent with access to a channel read action can therefore retrieve content or metadata from channels or rooms excluded by the operator's read policy; the practical impact depends on the permissions held by the connected bot account. The issue is fixed in 2026.8.1.
Patch / fix
- npm @openclaw/msteams 2026.8.1
- npm @openclaw/feishu 2026.8.1
- npm @openclaw/matrix 2026.8.1
- npm @openclaw/googlechat 2026.8.1
- openclaw msteams 2026.8.1
- openclaw feishu 2026.8.1
- openclaw matrix 2026.8.1
- openclaw googlechat 2026.8.1
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- 41 d ago
Exploit prediction
0.21% chance of exploitation in the next 30 days, higher than 11% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 4.0 | 7.1 | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
| CNA | 3.1 | 6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| GitHub | 3.1 | 6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| CNA | 4.0 | 7.1 | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| npm | @openclaw/msteams | <2026.8.1 |
2026.8.1 |
| npm | @openclaw/feishu | <2026.8.1 |
2026.8.1 |
| npm | @openclaw/matrix | <2026.8.1 |
2026.8.1 |
| npm | @openclaw/googlechat | <2026.8.1 |
2026.8.1 |
Affected products
- openclaw msteams
- openclaw feishu
- openclaw matrix
- openclaw googlechat
Classification
References
-
github.com
/openclaw/openclaw/pull/99905
web
-
github.com
/openclaw/openclaw/commit/fbd330b7aa4a26726fa8468f0db2a23ada3843bd
web
-
github.com
/openclaw/openclaw/security/advisories/GHSA-g7fw-3gjp-g5hf
vendor-advisory, web
-
vulncheck.com
/advisories/openclaw-msteams-before-2026.8.1-channel-read-allowlist-bypass
third-party-advisory
-
github.com
/openclaw/openclaw
package
-
github.com
/openclaw/openclaw/releases/tag/v2026.8.1
web
Sources
- CVE List CVE-2026-100582
- GitHub Advisory GHSA-g7fw-3gjp-g5hf
- NVD CVE-2026-100582
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.
CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.