Description
OpenClaw versions before 2026.7.1 fail to properly validate owner authorization in the Codex computer-use installation command. Non-owner channel senders can install arbitrary plugins and execute MCP processes with OpenClaw user privileges, affecting host confidentiality, integrity, and availability.
Published: 2026-09-26
Score: 8.7 High
EPSS: < 1% Very Low
KEV: No
Impact: Authorization bypass leading to arbitrary plugin installation and execution of MCP processes with OpenClaw user privileges
Action: Patch immediately
AI Analysis

Impact

OpenClaw versions prior to 2026.7.1 have a flaw that does not correctly validate owner authorization when a Codex installation command is issued. The flaw permits a non‑owner channel member to install arbitrary plugins and launch MCP processes running under the OpenClaw user account, resulting in potential loss of host confidentiality, integrity, and availability.

Affected Systems

All OpenClaw installations with versions earlier than 2026.7.1 are affected. The vulnerability is tied to the Codex computer‑use installation command. Users or services running these older versions must assess whether the command is exposed over network or local interfaces.

Risk and Exploitability

The CVSS score of 8.7 indicates high severity, reflecting significant impact on confidentiality, integrity and availability. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, but the lack of an exploit probability metric does not reduce the inherent risk. Attackers who can send commands in a non‑owner channel can exploit the vulnerability, so the attack vector is likely either local or remote, depending on how the Codex install command is exposed.

Generated by OpenCVE AI on September 26, 2026 at 04:17 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade to OpenClaw version 2026.7.1 or later.
  • Reconfigure the system to allow the Codex install command only for channel owners.
  • Monitor plugin installation activity and audit logs for unauthorized installs.

Generated by OpenCVE AI on September 26, 2026 at 04:17 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 28 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Sat, 26 Sep 2026 02:30:00 +0000

Type Values Removed Values Added
Description OpenClaw versions before 2026.7.1 fail to properly validate owner authorization in the Codex computer-use installation command. Non-owner channel senders can install arbitrary plugins and execute MCP processes with OpenClaw user privileges, affecting host confidentiality, integrity, and availability.
Title OpenClaw before 2026.7.1 Authorization Bypass via Codex Install
First Time appeared Openclaw
Openclaw openclaw
Weaknesses CWE-862
CPEs cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*
Vendors & Products Openclaw
Openclaw openclaw
References
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Openclaw Openclaw
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-09-28T17:30:20.127Z

Reserved: 2026-09-26T01:04:14.442Z

Link: CVE-2026-100587

cve-icon Vulnrichment

Updated: 2026-09-28T17:30:12.549Z

cve-icon NVD

Status : Deferred

Published: 2026-09-26T03:17:06.810

Modified: 2026-09-28T18:17:13.803

Link: CVE-2026-100587

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-26T06:45:05Z

Weaknesses