Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.7

OpenClaw lets attacker run commands via cron

CVE-2026-100580 · published 18 days ago
Summary

The OpenClaw software lets a user schedule tasks with a built‑in cron feature. A flaw lets an attacker craft a specially cased request that bypasses the safety check and creates a persistent scheduled job that runs any command with the same rights as the OpenClaw process, potentially exposing files, credentials, and disrupting services. Upgrade to version 2026.7.1 or later to close the gap.

What to do
  • Update openclaw openclaw to version 2026.7.1 or later.
Affected software
VendorProductAffected versions
openclaw openclaw < 2026.7.1
Original advisory text
OpenClaw before 2026.7.1 Remote Code Execution via cron tool
OpenClaw (npm package 'openclaw') before 2026.7.1 improperly handles case sensitivity in the model-facing cron tool: a mixed-case payload kind can pass the agent-facing shell-execution guard and later normalize into a command job. An actor able to steer a tool-enabled agent can therefore create a persistent cron job that executes attacker-selected commands with the privileges of the OpenClaw process user, resulting in access to host files and credentials and impact to scheduled service availability. The issue is limited to cron jobs created or edited through the model-facing cron tool; direct CLI and authorized Gateway scheduling surfaces are trusted operator controls. Fixed in 2026.7.1.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
8.7 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-178Improper Handling of Case Sensitivity
Timeline
Published26 Sep 2026
Updated14 Oct 2026
First seen26 Sep 2026
Sources
CVE-2026-100580 · NVD
CVE-2026-100580 · MITRE
CVE-2026-100580 · OSV
GHSA-8xxh-v4vc-qvm4 · GHSA
Track software like this
Free during beta