SB2026110351 - Multiple vulnerabilities in OpenClaw
Published: November 3, 2026
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 2 vulnerabilities.
1) Missing Authorization (CVE-ID: CVE-2026-100525)
CWE-ID: CWE-862 - Missing Authorization
CVSSv4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote user to disclose operational metrics without the required read permission.
The vulnerability exists due to missing authorization in the OpenClaw Prometheus diagnostics plugin when handling requests to its authenticated metrics endpoint. A remote user can request the diagnostics document using a Gateway identity whose effective role lacks operator.read to retrieve operational metrics that should be restricted.
The exposure applies to deployments using trusted-proxy or another identity-bearing authentication mode; shared-secret Gateway callers do not create this condition.
2) Missing Authorization (CVE-ID: CVE-2026-100526)
CWE-ID: CWE-862 - Missing Authorization
CVSSv4: 6 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote user to disclose local file contents outside the sender's configured media roots through outbound Discord emoji or sticker uploads.
The vulnerability exists due to missing authorization in OpenClaw's Discord emoji and sticker upload actions when loading local files without retaining the sender-scoped media policy. A remote user can invoke an allowed guild asset action with a known or derived local file path to upload file contents that the sender's configured media roots would otherwise reject.
The issue does not provide unrestricted filesystem browsing or code execution.
Remediation
Install update from vendor's website.