CVE-2026-100594 OpenClaw before 2026.7.1 Authorization Bypass via trajectory export
Attackers can bypass authorization to access sensitive session data including prompts and tool schemas via the trajectory export endpoint.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-100594?
CVE-2026-100594 is a high-severity missing authorization vulnerability in OpenClaw, published on 26 Sep 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
OpenClaw versions before 2026.7.1 contain an authorization bypass vulnerability in the /export-trajectory endpoint that allows non-owner senders to request and receive owner-only trajectory bundles. Attackers can access prompts, model messages, tool schemas, runtime events, and local path metadata from affected sessions by exploiting insufficient authorization checks.
Weakness: CWE-200
Which versions are affected by CVE-2026-100594?
How do I fix CVE-2026-100594?
Upgrade to a fixed version.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2026-100594 being exploited?
There is no known exploitation of CVE-2026-100594 in the wild and no public exploit code.
Sources
Also known as GHSA-89cw-7452-cfrf, GHSA-mwm7-gr2g-859h, MINI-4gm4-28f3-pc7c.