Description
OpenClaw (npm package 'openclaw') before 2026.7.1 improperly handles case sensitivity in the model-facing cron tool: a mixed-case payload kind can pass the agent-facing shell-execution guard and later normalize into a command job. An actor able to steer a tool-enabled agent can therefore create a persistent cron job that executes attacker-selected commands with the privileges of the OpenClaw process user, resulting in access to host files and credentials and impact to scheduled service availability. The issue is limited to cron jobs created or edited through the model-facing cron tool; direct CLI and authorized Gateway scheduling surfaces are trusted operator controls. Fixed in 2026.7.1.
Published: 2026-09-26
Score: 8.7 High
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution
Action: Immediate Patch
AI Analysis

Impact

OpenClaw (npm package 'openclaw') before 2026.7.1 has a case‑sensitivity bug in its model‑facing cron tool. A mixed‑case payload bypasses the agent‑facing shell‑execution guard and is later normalised into a command job. An attacker who can steer a tool‑enabled agent can therefore create a persistent cron job that runs arbitrary commands with the privileges of the OpenClaw process user. This results in unauthorized access to host files, credentials and can disrupt scheduled service availability.

Affected Systems

Vendors: OpenClaw. Product: OpenClaw (npm package openclaw). Affected versions: any release prior to 2026.7.1.

Risk and Exploitability

CVSS score is 8.7, indicating High severity. EPSS score is not available, so exploitation probability is unknown. The vulnerability is not listed in CISA KEV. The likely attack vector requires an attacker to control or influence a tool‑enabled agent; once a malicious cron job is added, it will execute with the OpenClaw process user’s privileges. This could lead to persistent elevation of privilege on the host and availability impact.

Generated by OpenCVE AI on September 26, 2026 at 04:21 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade OpenClaw to version 2026.7.1 or later, which removes the case‑sensitivity flaw in the cron tool.
  • If an upgrade is not immediately possible, disable or restrict the model‑facing cron scheduling functionality so that only trusted users or administrators can create cron jobs.
  • Ensure that the OpenClaw process runs with the minimum privileges required and monitor the system for unexpected or unauthorized cron job creation.

Generated by OpenCVE AI on September 26, 2026 at 04:21 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 05 Oct 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Sat, 26 Sep 2026 02:30:00 +0000

Type Values Removed Values Added
Description OpenClaw (npm package 'openclaw') before 2026.7.1 improperly handles case sensitivity in the model-facing cron tool: a mixed-case payload kind can pass the agent-facing shell-execution guard and later normalize into a command job. An actor able to steer a tool-enabled agent can therefore create a persistent cron job that executes attacker-selected commands with the privileges of the OpenClaw process user, resulting in access to host files and credentials and impact to scheduled service availability. The issue is limited to cron jobs created or edited through the model-facing cron tool; direct CLI and authorized Gateway scheduling surfaces are trusted operator controls. Fixed in 2026.7.1.
Title OpenClaw before 2026.7.1 Remote Code Execution via cron tool
First Time appeared Openclaw
Openclaw openclaw
Weaknesses CWE-178
CPEs cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*
Vendors & Products Openclaw
Openclaw openclaw
References
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Openclaw Openclaw
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-10-05T14:55:02.909Z

Reserved: 2026-09-26T01:03:42.740Z

Link: CVE-2026-100580

cve-icon Vulnrichment

Updated: 2026-10-05T14:50:42.743Z

cve-icon NVD

Status : Deferred

Published: 2026-09-26T03:17:05.783

Modified: 2026-10-05T15:17:13.500

Link: CVE-2026-100580

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-26T07:30:08Z

Weaknesses
  • CWE-178

    Improper Handling of Case Sensitivity