CVE-2026-100604
Received Received - Intake

Incorrect Authorization in ClawHub Application

Publication date: 2026-09-26

Last updated on: 2026-09-26

Assigner: VulnCheck

Description
ClawHub (openclaw/clawhub) contains an incorrect authorization vulnerability in the ClawHub application/backend: an organization-owned skill retains the ownerUserId of its original publisher, and transfer and lifecycle authorization checks trust that historical user before requiring current organization privileges. An authenticated user who originally published an organization skill can therefore transfer, delete, or restore that skill — taking control of its trusted name and history — even after their organization privileges have been revoked or downgraded. The issue was confirmed at revision cbfee7343ddc867316dd9b3de6fa8856730f9f41; the complete historical affected range was not established. It is fixed by PR #3680, included in revision 8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650, which was deployed to clawhub.ai on 2026-09-11; self-hosted deployments should update to that revision or a later descendant. The npm CLI and OpenClaw runtime are separate products and are not affected.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-26
Last Modified
2026-09-26
Generated
2026-09-26
AI Q&A
2026-09-26
EPSS Evaluated
N/A
NVD
CVE-2026-100604
EUVD
EUVD-2026-87699

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
openclaw clawhub 8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-863 The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

ClawHub contains an incorrect authorization vulnerability where organization-owned skills retain the ownerUserId of their original publisher. This allows an authenticated user who originally published a skill to transfer, delete, or restore it even after their organization privileges are revoked or downgraded. The issue was fixed in revision 8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650.

Impact Analysis

An attacker with historical publishing rights could regain control of organization skills, including their trusted names and histories. This could lead to misuse of the skill's reputation or functionality, but does not allow arbitrary account takeover or downstream code execution.

Mitigation Strategies

Update ClawHub to revision 8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650 or later. Self-hosted deployments must apply this fix to prevent unauthorized skill transfers, deletions, or restorations by former publishers.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-100604. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart