Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.7
CVE-2026-100560: OpenClaw before 2026.8.1 can run commands without approval
CVE-2026-100560 · published 18 days ago
Summary
OpenClaw versions released before 2026.8.1 allow a previously approved program to be run again with different instructions without asking the user for permission. This means an attacker could make the program do things like read files or talk to internal services without triggering a new approval prompt. Upgrade to version 2026.8.1 or later to restore proper approval checks.
What to do
- Update openclaw openclaw to version 2026.8.1 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| openclaw | openclaw | < 2026.8.1 |
Original advisory text
OpenClaw before 2026.8.1 Reusable Exec Approvals Authorization Bypass
OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability where Allow Always approvals for exact commands persist as path-only grants on macOS and Linux. Attackers can reuse the same executable with different arguments to execute commands without triggering new approval prompts, potentially accessing files or internal services.
References
- https://github.com/openclaw/openclaw/security/advisories/GHSA-74gc-hg2m-79p9
- https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-reusable-exec-appr...
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/100xxx/CVE-2026-1005... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-100560 Vendor Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Severity
7.7
High
Type
CWE-863Incorrect Authorization
Timeline
Published26 Sep 2026
Updated14 Oct 2026
First seen26 Sep 2026
Sources
CVE-2026-100560 · NVD
CVE-2026-100560 · MITRE
CVE-2026-100560 · OSV
GHSA-74gc-hg2m-79p9 · GHSA
Track software like this
Free during beta