CVE-2026-100557: OpenClaw before 2026.8.1 Authorization Bypass via Skill Tool Dispatch
OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in skill tool dispatch that fails to carry the sender's owner status. Non-owner senders authorized to invoke skill commands can access owner-only tools and server credentials reserved for owners.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
OpenClawto a version that resolves this vulnerability.Fixed in 2026.8.1
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
OpenClaw deployments running versions before 2026.8.1 are exposed when non-owner senders are authorized to invoke skill commands. Those senders may be able to reach tools and server credentials intended only for owners.
What access does an attacker need?
An attacker needs to be a non-owner sender that is authorized to invoke skill commands. No user interaction is required according to the supplied vector.
What is the impact of successful exploitation?
A successful attacker can access owner-only tools and server credentials reserved for owners. The provided severity vector indicates high confidentiality and integrity impact, with low availability impact.
What should be done if the deployment cannot be upgraded immediately?
The available information identifies authorization to invoke skill commands as the relevant precondition. Restricting or removing skill-command access for non-owner senders can reduce exposure until an upgrade is possible.