CVE-2026-100553 OpenClaw CVE debrief

Who should care

Defenders responsible for OpenClaw deployments, particularly those using Feishu integration, should assess exposure and apply the patch to prevent unauthorized pin removal. This includes reviewing Feishu group authorization and membership, monitoring for unauthorized pin removal attempts, and verifying OpenClaw versions.

Why it matters

CVE-2026-100553 is a medium-severity vulnerability in OpenClaw that allows an admitted sender to bypass the intended cross-context message mutation policy, potentially leading to unauthorized pin removal from Feishu groups. Defenders should prioritize verifying OpenClaw versions and applying the patch to prevent this issue.

• Potential unauthorized pin removal from Feishu groups
• Bypassing of intended cross-context message mutation policy
• Limited impact to message mutation (pin removal) only

Technical summary

OpenClaw versions >= 2026.6.9 and < 2026.8.1 do not declare the native chatId parameter as a delivery target in the Feishu unpin feature, allowing an admitted sender to remove a pin from another Feishu group when tools.message.crossContext.allowWithinProvider is disabled. The vulnerability has a medium severity and is fixed in OpenClaw version 2026.8.1, with Feishu membership and group authorization still applying to limit the impact to message mutation (pin removal). Defenders should prioritize verifying OpenClaw versions and applying the patch.

Defensive priority

Defenders should prioritize verifying OpenClaw versions and applying the patch to prevent unauthorized pin removal.

Recommended defensive actions

• Verify OpenClaw version and apply patch
• Review Feishu group authorization and membership
• Monitor for unauthorized pin removal attempts
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.

Evidence notes

The issue is fixed in OpenClaw version 2026.8.1. Feishu membership and group authorization still apply, and the demonstrated impact is limited to message mutation (pin removal). The vulnerability allows an admitted sender to bypass the intended cross-context message mutation policy when tools.message.crossContext.allowWithinProvider is disabled, potentially leading to unauthorized pin removal from Feishu groups.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.