CVEs / CVE-2026-100585
CVE-2026-100585
OpenClaw (npm package `openclaw`) before 2026.7.1 fails to enforce the owner-only authorization requirement for Claude Code permission prompts delivered through the MCP channel bridge. An authorized non-owner channel sender with channel command access can approve or deny a pending permission request intended for the owner, causing the requested action to proceed without owner consent. The practical impact depends on the pending action and the host capabilities requested by the Claude Code run. The issue is fixed in version 2026.7.1.
Affected products · 1
| Product | Versions affected | Fixed in |
|---|---|---|
| Anthropic: Claude Code | not stated by CPE | — |
Versions as NVD's CPE configuration states them; "—" means the record gives no fixed version, not that none exists. Check the vendor's advisory in the references.
In this registry
- Claude Code — agent dossier
References · 2
- github.com/openclaw/openclaw/security/advisories/GHSA-p5g8-m35v-7m82
- www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-mcp-channe
The official record's references, as NVD lists them, minus any tagged Exploit. Nothing here is an exploit or a proof of concept.
Description, scores, versions and references are the official CVE record's own, retrieved 2026-10-25 from NVD. Category, attack surface and cross-links are this registry's classification and can be wrong — use the button above. Not a severity assessment for your deployment.