CVE-2026-100562 | OpenClaw up to 2026.6.9 sessions.create auth-profile authorization

September 26, 2026 Yanac

A vulnerability, which was classified as critical, has been found in OpenClaw. This impacts the function sessions.create. This manipulation of the argument auth-profile causes authorization bypass.

This vulnerability is handled as CVE-2026-100562. The attack can be initiated remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More