Medium severity · published Sep 26, 2026
CVE-2026-100566
OpenClaw LINE before 2026.8.1 Access Control Inheritance
6.5
CVSS
0.2%
EPSS
No
On KEV
Description
OpenClaw LINE versions before 2026.8.1 contain an access control vulnerability where group allowlist mode silently inherits DM allowFrom values when groupAllowFrom is not explicitly configured. Attackers with group participation can trigger the agent despite configured group allowlist restrictions when DM access is broader than intended group access.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 10% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
line · openclaw
before 2026.8.1 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-100566
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-100566
vendor-advisory
https://github.com/openclaw/openclaw/security/advisories/GHSA-fgwg-c3wv-8f45
third-party-advisory
https://www.vulncheck.com/advisories/openclaw-line-before-2026.8.1-access-control-inheritance