CVE-2026-100603— ClawHub before 8c2de6c506 Skill Hiding via Coordinated Reports
Quick assessment
Affected
openclaw clawhub
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
ClawHub (openclaw/clawhub) 的应用后端模块在技能报告审核流程中存在缺陷：四个不同的普通认证账户可以对可见的技能发起报告，从而触发该技能在目录中自动隐藏（moderationStatus: hidden），而无需任何审核员的人工判断。由于报告配额仅计算针对可见目标提交的报告，相同账户可以针对其他技能重复此操作；官方技能也不在此豁免范围内。该问题已在修订版 cbfee7343ddc867316dd9b3de6fa8856730f9f41 中得到确认，但完整的受影响历史版本范围尚未明确。修复方案
Possible ATT&CK Techniques 1 AI
T1498.002 · Reflection Amplification
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-100603
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
ClawHub before 8c2de6c506 Skill Hiding via Coordinated Reports
Source: CVE Program / CVE List V5
Vulnerability Description
ClawHub (openclaw/clawhub) application/backend contains a flaw in the skill report moderation flow: four distinct ordinary authenticated accounts can report a visible skill and trigger automatic hiding (moderationStatus: hidden) of that skill from the catalog without any moderator decision. Because the reporter quota counts only reports filed against visible targets, the same accounts can repeat the process against additional skills; official skills are not exempt. The issue was confirmed at revision cbfee7343ddc867316dd9b3de6fa8856730f9f41; the complete historical affected range was not established. The fix (PR #3681) is included in revision 8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650; self-hosted deployments should update to that revision or a later descendant. The npm CLI and OpenClaw runtime are separate products and are not affected.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
交互频率的控制不恰当
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-100603
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-100603
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-100603 (1)
Other References for CVE-2026-100603 (2)
Same Patch Batch · openclaw · 2026-09-26 · 79 CVEs total
| CVE-2026-100575 | 8.8 HIGH | OpenClaw Slack before 2026.8.1 Authentication Bypass via Group DM |
| CVE-2026-100580 | 8.8 HIGH | OpenClaw before 2026.7.1 Remote Code Execution via cron tool |
| CVE-2026-100599 | 8.8 HIGH | OpenClaw 2026.5.1 before 2026.7.1 Remote Code Execution via googlemeet.chrome |
| CVE-2026-100552 | 8.8 HIGH | OpenClaw before 2026.8.1 Policy Bypass via Native Tools |
| CVE-2026-100586 | 8.8 HIGH | OpenClaw Codex before 2026.7.1 Authorization Bypass via Bind |
| CVE-2026-100596 | 8.8 HIGH | OpenClaw before 2026.7.1 Authorization Bypass via MCP Configuration |
| CVE-2026-100544 | 8.8 HIGH | openclaw voice-call before 2026.8.1 Authorization Bypass |
| CVE-2026-100587 | 8.8 HIGH | OpenClaw before 2026.7.1 Authorization Bypass via Codex Install |
| CVE-2026-100589 | 8.3 HIGH | OpenClaw before 2026.7.1 Sandbox Bypass via Browser Node |
| CVE-2026-100551 | 8.3 HIGH | OpenClaw iOS Control UI TLS Pin Enforcement Bypass |
| CVE-2026-100588 | 8.3 HIGH | OpenClaw before 2026.7.1 Authentication Bypass via node.invoke |
| CVE-2026-100568 | 8.3 HIGH | OpenClaw before 2026.8.1 Unauthorized Command Job Access |
| CVE-2026-100557 | 8.3 HIGH | OpenClaw before 2026.8.1 Authorization Bypass via Skill Tool Dispatch |
| CVE-2026-100567 | 8.2 HIGH | OpenClaw before 2026.8.1 DNS Rebinding via CDP Hostname |
| CVE-2026-100532 | 8.1 HIGH | openclaw WhatsApp before 2026.8.1 Authentication Bypass |
| CVE-2026-100559 | 8.0 HIGH | OpenClaw before 2026.8.1 Command Injection via Escaped Newlines |
| CVE-2026-100561 | 8.0 HIGH | OpenClaw before 2026.8.1 Authentication Bypass via Exec Wrapper |
| CVE-2026-100585 | 8.0 HIGH | OpenClaw before 2026.7.1 Authentication Bypass via MCP Channel |
| CVE-2026-100597 | 7.8 HIGH | OpenClaw before 2026.7.1 Path Traversal via Filesystem Race |
| CVE-2026-100570 | 7.8 HIGH | OpenClaw before 2026.8.1 Remote Code Execution via CLOUDSDK_PYTHON_ARGS |
Showing top 20 of 79 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: clawhub
-
CVE-2026-100604
ClawHub Authentication Bypass via Former Publisher Skill Con -
CVE-2026-100602
ClawHub Changelog Preview Information Disclosure via Authori -
CVE-2026-100601
ClawHub SSRF via Unchecked DNS Resolution in Profile Image -
CVE-2026-100600
ClawHub before 8c2de6c506 Quota Exhaustion via Anonymous API
Same vendor: openclaw
-
CVE-2026-100604
ClawHub Authentication Bypass via Former Publisher Skill Con -
CVE-2026-100602
ClawHub Changelog Preview Information Disclosure via Authori -
CVE-2026-100600
ClawHub before 8c2de6c506 Quota Exhaustion via Anonymous API -
CVE-2026-100601
ClawHub SSRF via Unchecked DNS Resolution in Profile Image -
CVE-2026-100599
OpenClaw 2026.5.1 before 2026.7.1 Remote Code Execution via
Same weakness: CWE-799
-
CVE-2025-36045
TS4300 Tape Library addresses security vulnerability -
CVE-2025-13882
Multiple Security Vulnerabilities in IBM Sterling Partner En -
CVE-2026-54594
OmniBlocks: Spamming in Discussions tab possible via disc.ym -
CVE-2026-85586
phpMyFAQ before 4.1.8 CAPTCHA Bypass via store parameter -
CVE-2026-54738
Lemmy: Rate limit bypass via X-Forwarded-For header spoofing
V. Comments for CVE-2026-100603
No comments yet