https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T20:14:45.748676+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-26326 CVE-2026-26326 — OpenClaw skills.status could leak secrets to operator.read clients 2026-10-02T20:14:46.715394+00:00

Affected: openclaw

OpenClaw is a personal AI assistant. Prior to version 2026.2.14, `skills.status` could disclose secrets to `operator.read` clients by returning raw resolved config values in `configChecks` for skill `requires.config` paths. Version 2026.2.14 stops including raw resolved config values in requirement checks (return only `{ path, satisfied }`) and narrows the Discord skill requirement to the token key. In addition to upgrading, users should rotate any Discord tokens that may have been exposed to read-scoped clients.

 https://vulnerability.circl.lu/vuln/ghsa-8mh7-phf8-xgfm GHSA-8mh7-phf8-xgfm — OpenClaw skills.status could leak secrets to operator.read clients 2026-10-02T20:14:46.715481+00:00

Affected: npm: openclaw

### Summary

`skills.status` could disclose secrets to `operator.read` clients by returning raw resolved config values in `configChecks` for skill `requires.config` paths.

### Affected Packages / Versions

- Package: `openclaw` (npm) - Affected: `<= 2026.2.13` - Patched: `2026.2.14`

### Details

The gateway method `skills.status` returned a requirements report that included `configChecks[].value` (the resolved value for each `requires.config` entry). If a skill required a broad config subtree (for example `channels.discord`), the report could include secrets such as Discord bot tokens.

`skills.status` is callable with `operator.read`, so read-scoped clients could obtain secrets without `operator.admin` / `config.*` access.

### Fix

- Stop including raw resolved config values in requirement checks (return only `{ path, satisfied }`). - Narrow the Discord skill requirement to the token key.

Fix commit(s):

- d3428053d95eefbe10ecf04f92218ffcba55ae5a - ebc68861a61067fc37f9298bded3eec9de0ba783

### Mitigation

Rotate any Discord tokens that may have been exposed to read-scoped clients.

Thanks @simecek for reporting.

---

Fix commits d3428053d95eefbe10ecf04f92218ffcba55ae5a and ebc68861a61067fc37f9298bded3eec9de0ba783 confirmed on main and in v2026.2.14. Upgrade to `openclaw >= 2026.2.14`.