CVE-2026-100556: OpenClaw before 2026.8.1 Authentication Bypass via Session Reset
OpenClaw (npm package openclaw) versions >= 2026.5.2 and < 2026.8.1 contain an incorrect authorization vulnerability in WhatsApp group handling. A group sender who is admitted for ordinary messages but denied by commands.allowFrom or owner command authorization can issue the /new <model> command to reset the shared group session and persist a provider and model override. This allows a command-denied group member to select a provider and model already permitted by the operator for subsequent turns in the shared group session, potentially changing provider routing, cost, data flow, or availability. It does not allow adding a new provider or host command execution. The issue is fixed in version 2026.8.1.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
openclawto a version that resolves this vulnerability.Fixed in 2026.8.1
Event History
Frequently Asked Questions
Which deployments are exposed?
Deployments using the npm package openclaw at versions 2026.5.2 through versions earlier than 2026.8.1 are affected when WhatsApp group handling permits a sender to submit ordinary messages while denying that sender command authorization through commands.allowFrom or owner-command authorization.
What access does an attacker need?
The attacker must be a WhatsApp group sender who is admitted for ordinary group messages. They do not need command authorization, but can invoke /new <model> to reset the shared group session.
What can the attacker change?
A command-denied group member can persist a provider and model override for later turns in the shared group session, limited to providers and models already permitted by the operator. This can alter provider routing, cost, data flow, or availability, but cannot add a new provider or execute host commands.
What is the remediation?
Upgrade openclaw to version 2026.8.1. The provided data identifies this version as the fix.