CVE-2026-100554 OpenClaw before 2026.8.1 Canvas Capability Revocation Bypass
Revoked nodes can retain Canvas access during a grace period, bypassing immediate authorization revocation in OpenClaw.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-100554?
CVE-2026-100554 is a low-severity vulnerability in OpenClaw, published on 26 Sep 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
OpenClaw (npm package 'openclaw') versions >= 2026.5.12 and < 2026.8.1 do not immediately invalidate Canvas HTTP authorization when a paired node is revoked. Node revocation invalidates the WebSocket client, but Canvas HTTP authorization continues to accept and renew the previously granted capability until WebSocket close cleanup completes. As a result, a revoked paired node can continue exercising its Canvas capability against the capability's configured routes during the close grace period. The issue is fixed in 2026.8.1; as a workaround, restart the Gateway after revoking a node that has Canvas access.
Weakness: CWE-613
Which versions are affected by CVE-2026-100554?
How do I fix CVE-2026-100554?
Upgrade to a fixed version.
Is CVE-2026-100554 being exploited?
There is no known exploitation of CVE-2026-100554 in the wild and no public exploit code.
Sources
Also known as GHSA-g697-vv6h-r8hv, GHSA-r8gf-76ch-pvpx, MINI-6xxc-v4qr-2wg3.