Skip to content
OpenAdvisories

Product · OpenClaw

matrix

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-100541

    OpenClaw Matrix before 2026.8.1 Authorization Bypass via Case Folding

    OpenClaw's Matrix integration (npm package @openclaw/matrix) versions >= 2026.2.2 and < 2026.8.1 lowercase complete Matrix user IDs — including historical localparts and the case-sensitive server-name portion — when deriving the OpenClaw authorization identit…

    OpenClaw matrix