Vulnerability · Published Sep 26, 2026 · Assigned by VulnCheck
CVE-2026-100525OpenClaw diagnostics-prometheus before 2026.9.3 Authentication Bypass
Medium 4.3
In plain English
A medium-severity missing authorization in diagnostics-prometheus from openclaw. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 16% of all known vulnerabilities).
Official description
The OpenClaw Prometheus diagnostics plugin (@openclaw/diagnostics-prometheus) before version 2026.9.3 does not enforce the operator.read scope on its authenticated metrics endpoint. In deployments using an identity-bearing Gateway authentication mode such as trusted-proxy, a caller whose effective role has no read scope can retrieve the diagnostics document even though ordinary read methods reject the same identity, disclosing operational metrics to an authenticated profile intentionally limited below read access. Shared-secret Gateway callers already hold the documented full operator scope and are not affected. The issue is fixed in 2026.9.3; as a workaround, disable the Prometheus endpoint or ensure every identity that can reach it is intended to hold operator.read.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| openclaw | diagnostics-prometheus | 0 – before 2026.9.3 |
Weakness: CWE-862 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
References
- GitHub Security Advisory (GHSA-rx8p-qcpv-c7vr) vendor-advisory
- VulnCheck Advisory: OpenClaw diagnostics-prometheus before 2026.9.3 Authentication Bypass third-party-advisory