Product
The @openclaw/whatsapp npm package prior to version 2026.8.1 contains an authorization bypass vulnerability (CVE-2026-100532) allowing non-owner users to trigger the WhatsApp login tool, resulting in service disruption via account disconnection.