CVE-2026-102807
OpenClaw before 2026.9.4 Authorization Bypass via MCP App Standalone Ticket
OpenClaw OpenClaw
CVSS
6.0MediumExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.23%Chance of exploitation activity in the next 30 days, higher than 13% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
- 2026.9.4OpenClawCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
OpenClaw before 2026.9.4 contains an incorrect authorization vulnerability in the mcp.app.view method that allows read-scoped operators to execute MCP App tools requiring operator.write scope. Attackers with operator.read tokens can obtain a standalone ticket from mcp.app.view and redeem it at the MCP app view endpoint to invoke state-changing tools without proper authorization checks.
Text from CVE List
Affected versions 2
- OpenClawaffected: all versions before 2026.9.4CVE List
- OpenClawunaffected: 2026.9.4CVE List
References 6
- github.com/openclaw/openclaw/pull/142661Fixvia CVE List
- github.com/openclaw/openclaw/commit/3bd8ec2b39b5f9e80aef0973f7d17eadc745b8f8Fixvia CVE List
- vulncheck.com/advisories/openclaw-before-2026.9.4-authorization-bypass-via-mcp-app-standalone-ticketAdvisoryvia CVE List
- github.com/openclaw/openclaw/blob/1391f7cd2d40ab5bbcf2f5f831d3a64f520e72d7/src/gateway/mcp-app-standalone.ts#L209-L215Referencevia CVE List
- docs.openclaw.ai/releases/2026.9.4Referencevia CVE List
- github.com/openclaw/openclawReferencevia CVE List