Openclaw Clawhub
5 CVEs affecting Openclaw Clawhub. Latest disclosed: 2026-09-26. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-100602 | Medium | 6.5 | 2026-09-26 | ClawHub (openclaw/clawhub application/backend) contains a missing authorization check in the changelog preview feature. A signed-in caller can invoke the publi… |
CVE-2026-100604 | Medium | 5.4 | 2026-09-26 | ClawHub (openclaw/clawhub) contains an incorrect authorization vulnerability in the ClawHub application/backend: an organization-owned skill retains the ownerU… |
CVE-2026-100603 | Medium | 5.4 | 2026-09-26 | ClawHub (openclaw/clawhub) application/backend contains a flaw in the skill report moderation flow: four distinct ordinary authenticated accounts can report a… |
CVE-2026-100601 | Medium | 5.3 | 2026-09-26 | ClawHub (openclaw/clawhub) application/backend contains a server-side request forgery vulnerability in the public profile preview's image fetching. The preview… |
CVE-2026-100600 | Medium | 5.3 | 2026-09-26 | ClawHub (the openclaw/clawhub application/backend) does not bind anonymous HTTP API requests to a trusted caller identity, so all direct anonymous API requests… |