Is CVE-2026-100564 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-100564?

CVE-2026-100564 has a CVSS v3 severity of MEDIUM (5.4).

Back

CVE-2026-100564

Description

OpenClaw versions before 2026.8.1 fail to neutralize spreadsheet formula characters in participant display names within attendance CSV exports. Attackers can inject formula-like cells that execute with spreadsheet user permissions when the export is opened in formula-enabled applications.