Description
OpenClaw Windows Node before 2026.7.1 contains an incorrect authorization vulnerability in the system.run exec-approval policy where ExecShellWrapperParser fails to split commands on pipe operators or extract command substitutions. Connected gateways or agents can bypass approval rules by placing denied commands behind allowed prefixes using pipe operators or command substitution syntax, achieving arbitrary command execution on Windows hosts.
Published: 2026-09-30
Score: 8.7 High
EPSS: < 1% Very Low
KEV: No
Impact: Arbitrary Command Execution
Action: Patch Now
AI Analysis

Impact

OpenClaw Windows Node before 2026.7.1 contains an incorrect authorization flaw in the system.run exec-approval policy; the ExecShellWrapperParser fails to separate commands on pipe operators or extract command substitutions. This allows connected gateways or agents to place disallowed commands behind permitted prefixes, effectively bypassing approval rules and executing arbitrary commands on Windows hosts.

Affected Systems

All OpenClaw Windows Node deployments using versions prior to 2026.7.1 are affected. The vendor is OpenClaw and the product is the OpenClaw Windows Node component.

Risk and Exploitability

The vulnerability scores a CVSS of 8.7, indicating a high severity. No EPSS score is available and it is not listed in the CISA KEV catalog. The likely attack vector involves an authenticated gateway or agent that is able to send commands to the system.run interface; by leveraging pipe or command substitution syntax, an attacker can bypass authorization and achieve arbitrary command execution on the host.

Generated by OpenCVE AI on September 30, 2026 at 20:23 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Deploy the latest OpenClaw Windows Node release (v2026.7.1 or later) to all affected instances, ensuring the ExecShellWrapperParser fix is in place.
  • Configure gateway and agent interfaces to require authenticated and signed command payloads, restricting the ability for unauthorized components to send executable commands.
  • If possible, disable or remove non‑essential gateway or agent functionalities that are not required for normal operations, thereby reducing the attack surface for command injection.

Generated by OpenCVE AI on September 30, 2026 at 20:23 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 01 Oct 2026 17:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Thu, 01 Oct 2026 16:00:00 +0000

Type Values Removed Values Added
First Time appeared Openclaw
Openclaw openclaw Windows Node
Vendors & Products Openclaw
Openclaw openclaw Windows Node

Wed, 30 Sep 2026 19:30:00 +0000

Type Values Removed Values Added
Description OpenClaw Windows Node before 2026.7.1 contains an incorrect authorization vulnerability in the system.run exec-approval policy where ExecShellWrapperParser fails to split commands on pipe operators or extract command substitutions. Connected gateways or agents can bypass approval rules by placing denied commands behind allowed prefixes using pipe operators or command substitution syntax, achieving arbitrary command execution on Windows hosts.
Title OpenClaw Windows Node before 2026.7.1 Authorization Bypass
Weaknesses CWE-863
References
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Openclaw Openclaw Windows Node
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-09-30T19:34:05.680Z

Reserved: 2026-09-28T15:44:45.389Z

Link: CVE-2026-101880

cve-icon Vulnrichment

Updated: 2026-09-30T19:33:58.908Z

cve-icon NVD

Status : Deferred

Published: 2026-09-30T20:17:18.857

Modified: 2026-10-01T02:20:29.877

Link: CVE-2026-101880

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-01T15:38:35Z

Weaknesses