Description
OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability where Allow Always approvals for exact commands persist as path-only grants on macOS and Linux. Attackers can reuse the same executable with different arguments to execute commands without triggering new approval prompts, potentially accessing files or internal services.
Published: 2026-09-26
Score: 7.7 High
EPSS: < 1% Very Low
KEV: No
Impact: Unauthorized Command Execution
Action: Patch Now
AI Analysis

Impact

A flaw in OpenClaw allows approval bypass for command executions that were previously granted "Allow Always" permissions. The bug causes these approvals to persist as path-only grants on macOS and Linux, letting an attacker reuse the same executable with new arguments without triggering an approval prompt. This permits the attacker to run arbitrary commands, access files, or reach internal services, effectively compromising the integrity of the system the application runs on.

Affected Systems

OpenClaw versions prior to 2026.8.1 are affected. The vulnerability is identified in the OpenClaw product built for macOS and Linux platforms.

Risk and Exploitability

The CVSS score is 7.7, indicating high severity. Exploit probability data is currently unavailable and the vulnerability is not listed in the CISA KEV catalog, suggesting no publicly known widespread exploitation yet. Attackers must be able to interact with the OpenClaw application to trigger the bypass, which implies local or application-level access is required. If such access is available, the vulnerability can be abused to execute arbitrary commands without user confirmation.

Generated by OpenCVE AI on September 26, 2026 at 04:46 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade to OpenClaw version 2026.8.1 or newer
  • If immediate upgrade is not possible, disable or remove any existing "Allow Always" approval grants for executables
  • Restrict the ability to reuse executables with arbitrary arguments by enforcing stricter command validation or sandboxing

Generated by OpenCVE AI on September 26, 2026 at 04:46 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 30 Sep 2026 01:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Sat, 26 Sep 2026 02:30:00 +0000

Type Values Removed Values Added
Description OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability where Allow Always approvals for exact commands persist as path-only grants on macOS and Linux. Attackers can reuse the same executable with different arguments to execute commands without triggering new approval prompts, potentially accessing files or internal services.
Title OpenClaw before 2026.8.1 Reusable Exec Approvals Authorization Bypass
First Time appeared Openclaw
Openclaw openclaw
Weaknesses CWE-863
CPEs cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*
Vendors & Products Openclaw
Openclaw openclaw
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H'}

cvssV4_0

{'score': 7.7, 'vector': 'CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Openclaw Openclaw
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-09-30T00:23:58.906Z

Reserved: 2026-09-26T01:02:38.348Z

Link: CVE-2026-100560

cve-icon Vulnrichment

Updated: 2026-09-30T00:23:54.175Z

cve-icon NVD

Status : Deferred

Published: 2026-09-26T03:17:02.833

Modified: 2026-09-30T01:16:34.410

Link: CVE-2026-100560

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-26T07:00:09Z

Weaknesses