{"vulnerability": "cve-2026-100575", "sightings": [{"uuid": "e3f50c60-4118-4c19-9065-4a368ae4b143", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100575", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117335459461034947", "content": "CVE-2026-100575 | HIGH severity | OpenClaw Slack (<2026.8.1): Missing authorization in multi-person DMs lets unauthorized users trigger Slack agents and access restricted tools/data. Patch to 2026.8.1+ now. https://radar.offseq.com/threat/cve-2026-100575-missing-authorization-in-openclaw-slack-2a3447a3c9192e9f #OffSeq #Vuln #Infosec #Slack", "creation_timestamp": "2026-09-26T04:30:26.251206Z"}, {"uuid": "3cd09c7c-c06b-409d-944a-4cbce26ad9de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100575", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwfh7gpzhk2q", "content": "OpenClaw Slack (<2026.8.1) faces HIGH severity (CVSS 8.7) auth bypass in multi-person DMs \u2014 unauthorized users can trigger Slack agents. Upgrade to 2026.8.1+ to secure your data. https://radar.offseq.com/threat/cve-2026-100575-missing-authorization-in-openclaw-slack-2a3447a3c9192e9f #OffSeq #Vuln...", "creation_timestamp": "2026-09-26T04:30:28.356336Z"}, {"uuid": "35d1637a-16b2-4a3f-98d0-087a60cfd9d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100575", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwfixraw2p25", "content": "Daily IT Security Digest \u2014 2026-09-26\napplied. [Source](https://radar.offseq.com/threat/cve-2026-18467-paytium)\n\n7. **OpenClaw Security Suite \u2014 Multiple Vulnerabilities Patched**\n   OpenClaw released multiple fixes addressing several security issues: CVE-2026-100575 (HIGH, missing authorization in", "creation_timestamp": "2026-09-26T05:01:57.584900Z"}, {"uuid": "c32fe75f-6ef1-43b2-a9ca-bf471911cd35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100575", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwfixrssdc2x", "content": "Daily IT Security Digest \u2014 2026-09-26\nOpenClaw users should upgrade to version 2026.9.3 or later immediately. [Source](https://radar.offseq.com/threat/cve-2026-100575-missing-auth)\n\n8. **Ransomware Group Orova Publishes New Victims**\n   Ransomware group Orova has published three new alleged victim", "creation_timestamp": "2026-09-26T05:01:58.659015Z"}, {"uuid": "ad87d2ca-a831-4897-8798-15d036d7a884", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100575", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwflkaj46z2c", "content": "\ud83d\udfe0 CVE-2026-100575 - High (8.8)\n\nOpenClaw Slack versions before 2026.8.1 fail to properly enforce sender allowlists in multi-perso...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100575/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-26T05:48:06.463353Z"}]}