{"vulnerability": "cve-2026-100596", "sightings": [{"uuid": "bfea8d53-8ad6-464e-960b-eb4830ec09fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100596", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwfertwayf2d", "content": "\ud83d\udfe0 CVE-2026-100596 - High (8.8)\n\nOpenClaw versions before 2026.7.1 fail to properly authorize non-owner users executing MCP config...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100596/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-26T03:47:05.169812Z"}, {"uuid": "1125eeca-4153-4a7d-8e59-cb64fcd28ec8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100596", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwh72upqfp2f", "content": "CVE-2026-100596 - openclaw\nVersions of OpenClaw released before 2026.7.1 allow users who do not own the system to modify configuration commands. Those changes can run with the program's full privileges, potentially\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#openclaw #CVE #infosec", "creation_timestamp": "2026-09-26T21:10:04.850187Z"}]}