Skip to content
OpenAdvisories

Product · OpenClaw

diagnostics-prometheus

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-100525

    OpenClaw diagnostics-prometheus before 2026.9.3 Authentication Bypass

    The OpenClaw Prometheus diagnostics plugin (@openclaw/diagnostics-prometheus) before version 2026.9.3 does not enforce the operator.read scope on its authenticated metrics endpoint. In deployments using an identity-bearing Gateway authentication mode such as …

    OpenClaw diagnostics-prometheus