CVE-2026-100528

What it is

OpenClaw (npm package 'openclaw') before 2026.8.1 could send third-party provider credentials to the wrong endpoint. In affected versions, when a third-party provider uses an OpenAI-compatible API and the resolved model metadata lacks a concrete base URL, a pinned session that continues after a model configuration hot reload retains that provider's credential while the OpenAI SDK selects its own default endpoint. A resulting request could disclose the configured third-party provider credential to an unrelated provider endpoint and fail with a misleading authentication error. Operators who observed this condition should rotate the affected credential. The issue is fixed in 2026.8.1.

At a glance

Exploitability

Can be exploited over the network with a low-privilege account, but needs a user to act. High risk of data exposure.

Exploit odds

0.2% chance of exploitation in the next 30 days (EPSS).

Fix

A patch, advisory or fixed version is referenced. Upgrade or apply it.

Timeline

1. 2026-09-26 03:16 UTC PublishedDisclosed publicly on CVE.org and NVD
2. 2026-09-30 01:16 UTC Last updatedMost recent change to the record

Details

Published

2026-09-26 03:16 UTC

Last modified

2026-09-30 01:16 UTC

Exploit probability

0.2% · EPSS, next 30 days

Weakness

CWE-200 · Information exposure

Record status

Deferred

Attack profile CVSS 4.0 · 5.9

Attack vector

Network

Complexity

High

Attack requirements

Present

Privileges needed

Low

User interaction

Passive

Confidentiality

High

Integrity

None

Availability

Low