CVE-2026-100543

Name of the Vulnerable Software and Affected Versions openclaw versions prior to 2026.8.1

Description Redacted configuration responses may include deterministic hashes computed from the original, unredacted configuration. If the Gateway password has low entropy and other configuration values can be reconstructed, these hashes can be used as offline password verifiers. An attacker obtaining the redacted configuration, for example through the config.get function, could perform offline brute-force attacks on password candidates, bypassing the rate-limited Gateway authentication path. Successful recovery of the password could grant shared-secret operator authority. Secret references are not affected by this issue.

Recommendations Update openclaw to version 2026.8.1.