{"metadata": {"vulnerability": "CVE-2026-100575", "count": 19, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-09-11T00:00:00Z", "date_only": false, "value": "2026-09-11T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-100575", "field": "containers.cna.datePublic"}, {"timestamp": "2026-09-26T01:03:10.863Z", "date_only": false, "value": "2026-09-26T01:03:10.863Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-100575", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-26T02:19:02.877Z", "date_only": false, "value": "2026-09-26T02:19:02.877Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-100575", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-26T03:17:05Z", "date_only": false, "value": "2026-09-26T03:17:05Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-P6PM-6PMC-M53C", "record": "GHSA-P6PM-6PMC-M53C", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-26T03:17:05.030Z", "date_only": false, "value": "2026-09-26T03:17:05.030", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-100575", "record": "FKIE_CVE-2026-100575", "field": "published"}, {"timestamp": "2026-09-26T03:30:26Z", "date_only": false, "value": "2026-09-26T03:30:26Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-P6PM-6PMC-M53C", "record": "GHSA-P6PM-6PMC-M53C", "field": "published"}, {"timestamp": "2026-09-26T03:30:26Z", "date_only": false, "value": "2026-09-26T03:30:26Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-P6PM-6PMC-M53C", "record": "GHSA-P6PM-6PMC-M53C", "field": "modified"}, {"timestamp": "2026-09-26T04:30:26.251Z", "date_only": false, "value": "2026-09-26T04:30:26.251206Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117335459461034947", "record": "cve-2026-100575", "field": "creation_timestamp", "uuid": "e3f50c60-4118-4c19-9065-4a368ae4b143", "content": "CVE-2026-100575 | HIGH severity | OpenClaw Slack (<2026.8.1): Missing authorization in multi-person DMs lets unauthorized users trigger Slack agents and access restricted tools/data. Patch to 2026.8.1+ now. https://radar.offseq.com/threat/cve-2026-100575-missing-authorization-in-openclaw-slack-2a3447a3c9192e9f #OffSeq #Vuln #Infosec #Slack", "url": "https://infosec.exchange/users/offseq/statuses/117335459461034947"}, {"timestamp": "2026-09-26T04:30:28.356Z", "date_only": false, "value": "2026-09-26T04:30:28.356336Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwfh7gpzhk2q", "record": "cve-2026-100575", "field": "creation_timestamp", "uuid": "3cd09c7c-c06b-409d-944a-4cbce26ad9de", "content": "OpenClaw Slack (<2026.8.1) faces HIGH severity (CVSS 8.7) auth bypass in multi-person DMs \u2014 unauthorized users can trigger Slack agents. Upgrade to 2026.8.1+ to secure your data. https://radar.offseq.com/threat/cve-2026-100575-missing-authorization-in-openclaw-slack-2a3447a3c9192e9f #OffSeq #Vuln...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mwfh7gpzhk2q"}, {"timestamp": "2026-09-26T05:01:57.584Z", "date_only": false, "value": "2026-09-26T05:01:57.584900Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwfixraw2p25", "record": "CVE-2026-100575", "field": "creation_timestamp", "uuid": "35d1637a-16b2-4a3f-98d0-087a60cfd9d2", "content": "Daily IT Security Digest \u2014 2026-09-26\napplied. [Source](https://radar.offseq.com/threat/cve-2026-18467-paytium)\n\n7. **OpenClaw Security Suite \u2014 Multiple Vulnerabilities Patched**\n   OpenClaw released multiple fixes addressing several security issues: CVE-2026-100575 (HIGH, missing authorization in", "url": "https://bsky.app/profile/hermes71.bsky.social/post/3mwfixraw2p25"}, {"timestamp": "2026-09-26T05:01:58.659Z", "date_only": false, "value": "2026-09-26T05:01:58.659015Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwfixrssdc2x", "record": "cve-2026-100575", "field": "creation_timestamp", "uuid": "c32fe75f-6ef1-43b2-a9ca-bf471911cd35", "content": "Daily IT Security Digest \u2014 2026-09-26\nOpenClaw users should upgrade to version 2026.9.3 or later immediately. [Source](https://radar.offseq.com/threat/cve-2026-100575-missing-auth)\n\n8. **Ransomware Group Orova Publishes New Victims**\n   Ransomware group Orova has published three new alleged victim", "url": "https://bsky.app/profile/hermes71.bsky.social/post/3mwfixrssdc2x"}, {"timestamp": "2026-09-26T05:48:06.463Z", "date_only": false, "value": "2026-09-26T05:48:06.463353Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwflkaj46z2c", "record": "CVE-2026-100575", "field": "creation_timestamp", "uuid": "ad87d2ca-a831-4897-8798-15d036d7a884", "content": "\ud83d\udfe0 CVE-2026-100575 - High (8.8)\n\nOpenClaw Slack versions before 2026.8.1 fail to properly enforce sender allowlists in multi-perso...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100575/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwflkaj46z2c"}, {"timestamp": "2026-09-26T20:40:05.310Z", "date_only": false, "value": "2026-09-26T20:40:05.310613Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwh5fb53pw2r", "record": "CVE-2026-100575", "field": "creation_timestamp", "uuid": "a963a9e3-0c88-4516-af95-3e481494bc58", "content": "CVE-2026-100575 - slack\nOlder versions of OpenClaw Slack let people who aren\u2019t supposed to be in a group direct message trick the system into acting as if they were authorized. This can give them access to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#slack #openclaw #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mwh5fb53pw2r"}, {"timestamp": "2026-09-28T17:28:15.956Z", "date_only": false, "value": "2026-09-28T17:28:15.956137Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-100575", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-28T17:28:15.956Z", "date_only": false, "value": "2026-09-28T17:28:15.956137Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-100575", "record": "FKIE_CVE-2026-100575", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-28T17:28:28.699Z", "date_only": false, "value": "2026-09-28T17:28:28.699Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-100575", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-08T15:21:48.531Z", "date_only": false, "value": "2026-10-08T15:21:48.531Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-100575", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-08T15:21:48.531Z", "date_only": false, "value": "2026-10-08T15:21:48.531Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-100575", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-08T16:16:56.943Z", "date_only": false, "value": "2026-10-08T16:16:56.943", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-100575", "record": "FKIE_CVE-2026-100575", "field": "lastModified"}]}