OpenClaw versions from 2026.2.26 up to, but not including, 2026.7.1 allow a PowerShell command analyze phase to approve a command that references a bare executable name. The runtime can then execute a different file with the same name that resides in the agent’s writable workspace instead of the approved system path. This works |abusing the allowlist logic| and results in arbitrary code execution with the privileges of the Gateway or node‑host user. The weakness is a missing validation of file resolution paths (CWE-426).

The vulnerable product is OpenClaw OpenClaw, with affected releases between 2026.2.26 and 2026.7.0 inclusive. The fix is provided in version 2026.7.1.

The CVSS score of 5.4 indicates a moderate severity. Because the EPSS score is not available and the vulnerability is not listed in CISA KEV, the likelihood of exploitation is undetermined but could be moderate. Exploitation requires an attacker with the ability to place a malicious executable in an agent-writable workspace and command the runtime to run a bare PowerShell executable name. The attacker then runs the malicious workspace file with Gateway-level or node-host privileges, gaining significant escalation.