Authorization bypass through user-controlled key in OpenClaw - CVE-2026-100531
Published: November 3, 2026
Vulnerability identifier: #VU158792
CSH Severity: Low
CVSS v4: 7.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-100531
CWE-ID: CWE-639
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to disclose Slack file contents outside authorized conversation boundaries.
The vulnerability exists due to authorization checks that fail open in the Slack download-file operation when processing files without the share metadata needed to verify their relationship to the requested conversation. A remote user can request a file using a known file identifier to retrieve its contents outside the configured conversation scope.
The issue does not permit listing arbitrary Slack files or bypassing Slack authentication.
Affected software
OpenClaw
How to mitigate CVE-2026-100531
Install security update from vendor's website.
OpenClaw - update to 2026.8.1