Is CVE-2026-100575 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-100575?

CVE-2026-100575 has a CVSS v3 severity of HIGH (8.8).

Back

CVE-2026-100575

Description

OpenClaw Slack versions before 2026.8.1 fail to properly enforce sender allowlists in multi-person direct messages. Disallowed participants can trigger Slack agents and access tools and data granted to those agents by bypassing configured sender policies.