CVE-2026-100602
Received Received - Intake

Missing Authorization in ClawHub Skill Changelog Preview

Publication date: 2026-09-26

Last updated on: 2026-09-26

Assigner: VulnCheck

Description
ClawHub (openclaw/clawhub application/backend) contains a missing authorization check in the changelog preview feature. A signed-in caller can invoke the public skills:generateChangelogPreview action for a skill they are not authorized to access; the previous version is read without the file-read authorization enforced on normal content access, and up to 8,000 characters of quarantined content may be submitted to the AI provider and reflected in the preview returned to the caller, disclosing restricted skill content. The issue was confirmed at revision cbfee7343ddc867316dd9b3de6fa8856730f9f41; the complete historical affected range was not established. It is fixed by PR #3682, included in revision 8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650, which was deployed to clawhub.ai on 2026-09-11; self-hosted deployments should update to that revision or a later descendant. The npm CLI and OpenClaw runtime are separate products and are not affected.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-26
Last Modified
2026-09-26
Generated
2026-09-26
AI Q&A
2026-09-26
EPSS Evaluated
N/A
NVD
CVE-2026-100602
EUVD
EUVD-2026-87697

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
openclaw clawhub From 8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650 (inc)
openclaw clawhub to 8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

ClawHub contains a missing authorization check in the changelog preview feature. A signed-in user can invoke the public skills:generateChangelogPreview action for a skill they are not authorized to access. This bypasses normal file-read authorization, allowing up to 8,000 characters of quarantined content to be sent to the AI provider and reflected in the preview returned to the caller, disclosing restricted skill content.

Detection Guidance

To detect this vulnerability, check if your ClawHub deployment is running a version prior to 8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650. Review logs for unauthorized access attempts to the skills:generateChangelogPreview action or unusual data exfiltration to AI providers.

Impact Analysis

If you are a ClawHub user with valid credentials, an attacker with your credentials could access unauthorized skill content through the changelog preview feature. This could lead to exposure of sensitive or restricted information, including up to 8,000 characters of quarantined content, which may be sent to the AI provider.

Compliance Impact

This vulnerability could lead to unauthorized disclosure of sensitive data, potentially violating GDPR (data protection) and HIPAA (health information privacy) requirements. Exposure of restricted content may result in non-compliance with these regulations, leading to legal and financial penalties.

Mitigation Strategies

Immediately update ClawHub to revision 8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650 or later. If using a self-hosted deployment, apply the patch from PR #3682. Monitor for any unauthorized access or data exposure in logs.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-100602. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart