https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T16:25:06.949370+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-100587 CVE-2026-100587 — OpenClaw before 2026.7.1 Authorization Bypass via Codex Install 2026-09-30T16:25:07.991476+00:00

Affected: OpenClaw

OpenClaw versions before 2026.7.1 fail to properly validate owner authorization in the Codex computer-use installation command. Non-owner channel senders can install arbitrary plugins and execute MCP processes with OpenClaw user privileges, affecting host confidentiality, integrity, and availability.