CVE-2026-100528 OpenClaw before 2026.8.1 Credential Disclosure via Provider Endpoint
OpenClaw library may leak third-party provider credentials to incorrect endpoints during model configuration hot reloads, requiring credential rotation.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2026-100528?
CVE-2026-100528 is a medium-severity vulnerability in OpenClaw, published on 26 Sep 2026. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
OpenClaw (npm package 'openclaw') before 2026.8.1 could send third-party provider credentials to the wrong endpoint. In affected versions, when a third-party provider uses an OpenAI-compatible API and the resolved model metadata lacks a concrete base URL, a pinned session that continues after a model configuration hot reload retains that provider's credential while the OpenAI SDK selects its own default endpoint. A resulting request could disclose the configured third-party provider credential to an unrelated provider endpoint and fail with a misleading authentication error. Operators who observed this condition should rotate the affected credential. The issue is fixed in 2026.8.1.
Weakness: CWE-200
Which versions are affected by CVE-2026-100528?
How do I fix CVE-2026-100528?
Upgrade to a fixed version.
Is CVE-2026-100528 being exploited?
There is no known exploitation of CVE-2026-100528 in the wild and no public exploit code.
Sources
Also known as GHSA-vhpg-cq3w-v8p9, GHSA-xwfm-93c9-gqh4, MINI-2mhg-q5p7-vqg8.