Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.6

OpenClaw can run unexpected commands after wrapper approved

CVE-2026-100561 · published 18 days ago
Summary

Versions of OpenClaw released before the August 2026 update may let an attacker replace the actual command inside a previously approved wrapper script. When this happens, the new command runs with the same rights as the OpenClaw process, bypassing any further approval checks. Upgrade OpenClaw to the latest version or remove trust from generic wrapper scripts to prevent this risk.

What to do
  • Update openclaw openclaw to version 2026.8.1 or later.
Affected software
VendorProductAffected versions
openclaw openclaw < 2026.8.1
Original advisory text
OpenClaw before 2026.8.1 Authentication Bypass via Exec Wrapper
OpenClaw (npm package 'openclaw') versions >= 2026.3.22 and < 2026.8.1 contain an approval-bypass flaw in the exec approval policy: the policy could trust a command-running wrapper without inspecting the command carried in its arguments. After an operator allowlisted or permanently approved a benign wrapper invocation, a later agent turn could substitute an arbitrary inner command and execute it with the OpenClaw process's host privileges without a further approval prompt. Exploitation requires the relevant wrapper to resolve on the host and a prior operator decision allowing that wrapper. Transparent shell carriers and opaque utilities such as process monitors, tracers, namespace tools, and proxy wrappers were affected through related trust-resolution gaps. Fixed in 2026.8.1.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
8.6 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-88Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
Timeline
Published26 Sep 2026
Updated13 Oct 2026
First seen26 Sep 2026
Sources
CVE-2026-100561 · NVD
CVE-2026-100561 · MITRE
CVE-2026-100561 · OSV
GHSA-ghpx-6xwq-2w4w · GHSA
Track software like this
Free during beta