{"vulnerability": "cve-2026-100587", "sightings": [{"uuid": "3240bf4f-155d-4619-8799-507af128538b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100587", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwfljrmiah2m", "content": "\ud83d\udfe0 CVE-2026-100587 - High (8.8)\n\nOpenClaw versions before 2026.7.1 fail to properly validate owner authorization in the Codex comp...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100587/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-26T05:47:50.503059Z"}, {"uuid": "1a39fe31-d75a-4ddb-b295-e0edfdfc900e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100587", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwh6j2ibvg2q", "content": "CVE-2026-100587 - openclaw\nVersions of OpenClaw released before 2026.7.1 do not check who is requesting a plugin installation. This means anyone can add malicious plugins or run code with the same rights as the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#openclaw #CVE #infosec", "creation_timestamp": "2026-09-26T21:00:06.042439Z"}]}