CVE-2026-100593: OpenClaw before 2026.7.1 Authentication Bypass via activation
OpenClaw (npm package openclaw) before 2026.7.1 does not enforce the documented owner-only requirement for persistent /activation policy changes in group channels. An authorized non-owner channel sender can change whether the agent requires mention-based activation, causing the agent to respond more broadly in the group (exposing its responses to additional group traffic) or suppressing expected activation behavior until an owner restores the intended setting. The issue is fixed in version 2026.7.1.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
openclawto a version that resolves this vulnerability.Fixed in 2026.7.1
Event History
Frequently Asked Questions
Who can exploit this issue?
An authorized non-owner sender in a group channel can exploit it. The attacker must be able to send messages in the affected channel; unauthenticated external attackers are not described as able to change the policy.
Which deployments are affected?
Deployments using the npm package openclaw before version 2026.7.1 are affected where persistent /activation policy changes can be made in group channels. The issue concerns the owner-only authorization check for those changes.
What can an attacker change through the bypass?
They can change whether the agent requires mention-based activation in the group. This can make the agent respond to broader group traffic or suppress the expected activation behavior until an owner restores the setting.
What should teams do if they cannot update immediately?
Limit group-channel membership to trusted authorized senders and have an owner monitor and restore the intended /activation setting. Updating to version 2026.7.1 is the stated fix.
How can an owner check for potential impact?
Review the current persistent /activation policy in each group channel and verify that it matches the owner’s intended mention-based activation behavior. Unexpected broader responses or suppressed activation behavior may indicate the setting was changed.