CVE-2026-100598
Received Received - Intake

Signal Reaction Binding Issue in OpenClaw npm Package

Publication date: 2026-09-26

Last updated on: 2026-09-26

Assigner: VulnCheck

Description
OpenClaw (npm package openclaw) before 2026.7.1 incorrectly binds Signal approval reactions. In affected versions, a reaction intended to resolve a structured approval request could instead attach to ordinary outbound text when unrelated outbound messages and a pending approval are present in the same conversation. As a result, an approver's reaction to unrelated text could be interpreted as approving or denying a pending host action; the practical impact depends on the pending request, conversation timing, and the actions available to the OpenClaw process. The issue does not change the authority of correctly identified approvers. This is fixed in version 2026.7.1.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-26
Last Modified
2026-09-26
Generated
2026-09-26
AI Q&A
2026-09-26
EPSS Evaluated
N/A
NVD
CVE-2026-100598
EUVD
EUVD-2026-87380

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
openclaw openclaw to 2026.7.1 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-346 The product does not properly verify that the source of data or communication is valid.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

OpenClaw before version 2026.7.1 has a logic error where reactions meant to approve or deny structured approval requests incorrectly attach to unrelated outbound text in Signal conversations. This happens when both a pending approval and unrelated messages exist in the same chat. The approver's reaction to unrelated text may then be misinterpreted as approving or denying a pending host action, depending on the request and timing.

Detection Guidance

To detect this vulnerability, check the installed version of the OpenClaw npm package. If the version is less than 2026.7.1, the system is vulnerable. Run 'npm list openclaw' to check the version. If vulnerable, update to version 2026.7.1 or later immediately.

Impact Analysis

This vulnerability could lead to unintended approvals or denials of pending host actions if an approver reacts to unrelated text in a Signal conversation. The impact varies based on the pending request type, conversation timing, and available actions for OpenClaw. It does not affect the authority of correctly identified approvers but may cause confusion or incorrect approvals.

Compliance Impact

The vulnerability could potentially impact compliance with GDPR and HIPAA by enabling unintended approvals or denials of actions due to misinterpreted reactions. This may lead to unauthorized data access or processing, violating confidentiality and integrity requirements under these regulations.

Mitigation Strategies

Upgrade OpenClaw to version 2026.7.1 or later. Before upgrading, avoid using reaction-based approvals in Signal, use alternative approval methods, and cancel pending requests if unrelated messages appear.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-100598. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart