{"data":{"id":"c31a118a-d8e7-491f-b203-eeced438664b","title":"CVE-2026-100528: OpenClaw (npm package 'openclaw') before 2026.8.1 could send third-party provider credentials to the wrong endpoint. In…","summary":"OpenClaw (npm package 'openclaw') before 2026.8.1 could send third-party provider credentials to the wrong endpoint. The flaw occurs when a third-party provider uses an OpenAI-compatible API, the resolved model metadata lacks a concrete base URL, and a pinned session continues after a model configuration hot reload. The retained credential can then be disclosed to an unrelated provider endpoint, producing a misleading authentication error.","solution":"Fixed in 2026.8.1. Operators who observed this condition should rotate the affected credential.","labels":["security","industry"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-100528","publishedAt":"2026-09-26T03:16:58.057Z","cveId":"CVE-2026-100528","cweIds":["CWE-200"],"cvssScore":"5.4","cvssSeverity":"medium","severity":"medium","attackType":["data_extraction"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["OpenAI"],"affectedVendorsRaw":["OpenClaw","OpenAI SDK","OpenAI-compatible API"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"OpenClaw credential exposure to wrong endpoint after model config hot reload","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:L","attackVector":"network","attackComplexity":"high","privilegesRequired":"low","userInteraction":"required","exploitMaturity":"unknown","epssScore":0.00243,"epssCheckedAt":"2026-11-12T15:03:09.675Z","kevDateAdded":null,"advisoryAliases":["GHSA-xwfm-93c9-gqh4"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-08T06:09:34.211Z","patchAvailable":null,"disclosureDate":"2026-09-26T03:16:58.057Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-116"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}