OpenClaw (npm package `openclaw`) versions before 2026.7.1 allow an authorized non‑owner member of a group channel to change the agent’s `/activation` policy. Because the package fails to enforce the documented owner‑only restriction, attackers can toggle the require‑mention setting, enabling the agent to reply to any message in the group or to ignore activation messages until the owner restores the setting. This can expose the agent’s responses to unintended recipients and disrupt normal activation behavior, impacting confidentiality and availability of the chat service.

OpenClaw for Node.js is affected on all releases prior to 2026.7.1. The fix is incorporated in version 2026.7.1 and later, so any deployment using an earlier version is vulnerable. The product is identified in CPE as cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*.

CVE-2026-100593 has a CVSS score of 5.3, indicating moderate severity. The EPSS score is not available, and the vulnerability is not currently listed in the CISA KEV catalog, suggesting no known active exploitation. The attack vector is likely local to a group channel where a legitimate member can send messages; no network access or elevated privileges beyond channel sending rights are required. Given the moderate CVSS and absence of documented exploitation, the overall risk is medium, but remediation is recommended.