Description
OpenClaw versions 2026.5.1 through 2026.7.0 fail to apply the configured exec approval path to Google Meet node commands. The googlemeet.chrome command accepts caller-supplied audio command arrays and executes them on a paired node without going through the normal system.run approval flow. In deployments with the Google Meet plugin enabled, a paired Chrome node, and the googlemeet.chrome node command allowed, a tool-enabled agent able to invoke that command can execute attacker-selected processes on the paired node, impacting files, credentials, browser profiles, and availability on that node. The issue is fixed in 2026.7.1; as a workaround, remove googlemeet.chrome from allowed node commands or disable the Google Meet plugin.
Published: 2026-09-26
Score: 8.7 High
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution
Action: Immediate Patch
AI Analysis

Impact

The vulnerability lies in the failure of OpenClaw to enforce the exec approval path for Google Meet node commands. A malicious user can supply audio command arrays that are executed on a paired node without normal approval, allowing arbitrary attacker‑selected process execution. This can compromise files, credentials, browser profiles, and cause denial of service on the affected node.

Affected Systems

OpenClaw software versions 2026.5.1 through 2026.7.0 are vulnerable, when the Google Meet plugin is enabled and the googlemeet.chrome node command is permitted. Users of OpenClaw 2026.5.1, 2026.6.x, or 2026.7.0 who have a Chrome‑paired node and have allowed googlemeet.chrome commands are impacted.

Risk and Exploitability

The CVSS score of 8.7 indicates high severity, and the exploit is possible remotely via the Google Meet command path. EPSS data is not available, and the issue is not listed in the CISA KEV catalog. Attackers can directly trigger the vulnerable command from the tool‑enabled agent, bypassing normal system.run approval, leading to remote code execution on the paired node.

Generated by OpenCVE AI on September 26, 2026 at 04:07 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the vendor‑issued patch to upgrade to version 2026.7.1
  • Remove googlemeet.chrome from the list of allowed node commands
  • Disable the Google Meet plugin entirely

Generated by OpenCVE AI on September 26, 2026 at 04:07 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 28 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Sat, 26 Sep 2026 02:30:00 +0000

Type Values Removed Values Added
Description OpenClaw versions 2026.5.1 through 2026.7.0 fail to apply the configured exec approval path to Google Meet node commands. The googlemeet.chrome command accepts caller-supplied audio command arrays and executes them on a paired node without going through the normal system.run approval flow. In deployments with the Google Meet plugin enabled, a paired Chrome node, and the googlemeet.chrome node command allowed, a tool-enabled agent able to invoke that command can execute attacker-selected processes on the paired node, impacting files, credentials, browser profiles, and availability on that node. The issue is fixed in 2026.7.1; as a workaround, remove googlemeet.chrome from allowed node commands or disable the Google Meet plugin.
Title OpenClaw 2026.5.1 before 2026.7.1 Remote Code Execution via googlemeet.chrome
First Time appeared Openclaw
Openclaw openclaw
Weaknesses CWE-78
CPEs cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*
Vendors & Products Openclaw
Openclaw openclaw
References
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Openclaw Openclaw
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-09-28T17:01:20.520Z

Reserved: 2026-09-26T01:04:47.561Z

Link: CVE-2026-100599

cve-icon Vulnrichment

Updated: 2026-09-28T17:01:12.967Z

cve-icon NVD

Status : Deferred

Published: 2026-09-26T03:17:08.667

Modified: 2026-09-28T17:17:42.627

Link: CVE-2026-100599

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-26T06:45:05Z

Weaknesses
  • CWE-78

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')