Vulnerability · Published Sep 26, 2026 · Assigned by VulnCheck
CVE-2026-100582OpenClaw Channel Plugins before 2026.8.1 Channel Read Allowlist Bypass
Medium 6.5
In plain English
A medium-severity missing authorization in feishu from openclaw. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 11% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
OpenClaw channel plugins (@openclaw/msteams, @openclaw/feishu, @openclaw/matrix, and @openclaw/googlechat) before 2026.8.1 do not enforce the configured channel read allowlist for caller-supplied explicit read targets in message, reaction, pin, member, and related metadata read actions. A lower-trust sender or a steered agent with access to a channel read action can therefore retrieve content or metadata from channels or rooms excluded by the operator's read policy; the practical impact depends on the permissions held by the connected bot account. The issue is fixed in 2026.8.1.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| npm | @openclaw/feishu | 2026.8.1 | GHSA-g7fw-3gjp-g5hf |
| npm | @openclaw/googlechat | 2026.8.1 | GHSA-g7fw-3gjp-g5hf |
| npm | @openclaw/matrix | 2026.8.1 | GHSA-g7fw-3gjp-g5hf |
| npm | @openclaw/msteams | 2026.8.1 | GHSA-g7fw-3gjp-g5hf |
Affected products (as reported)
Weakness: CWE-862 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
References
- GitHub Security Advisory (GHSA-g7fw-3gjp-g5hf) vendor-advisory
- VulnCheck Advisory: OpenClaw msteams before 2026.8.1 Channel Read Allowlist Bypass third-party-advisory