CVE-2026-100585

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.7.1

Description The openclaw npm package fails to enforce owner-only authorization for Claude Code permission prompts sent via the MCP channel bridge. This allows an authorized non-owner with channel command access to approve or deny pending permission requests intended for the owner, enabling actions to proceed without the owner's consent. The impact varies based on the requested host capabilities and the specific pending action.

Recommendations Update to version 2026.7.1.