Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.7
CVE-2026-100586: OpenClaw Codex lets non‑owners run code on server
CVE-2026-100586 · published 18 days ago
Summary
In versions of OpenClaw Codex before 2026.7.1, a user who can send commands but does not own a channel can create a link to the underlying runtime and make it run host‑level actions. This could let the attacker read files, launch tools, or start processes on the server. Upgrade to version 2026.7.1 or later and limit command permissions to trusted users.
What to do
- Update openclaw openclaw to version 2026.7.1 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| openclaw | openclaw | < 2026.7.1 |
Original advisory text
OpenClaw Codex before 2026.7.1 Authorization Bypass via Bind
OpenClaw Codex before 2026.7.1 fails to properly enforce owner authorization when creating native conversation bindings. Non-owner channel senders with command access can create bindings to the native Codex runtime and execute host-capable turns with access to files, tools, and processes.
References
- https://github.com/openclaw/openclaw/security/advisories/GHSA-9p6m-2872-xm7x
- https://www.vulncheck.com/advisories/openclaw-codex-before-2026.7.1-authorizatio...
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/100xxx/CVE-2026-1005... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-100586 Vendor Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Severity
8.7
High
Type
CWE-269Improper Privilege Management
Timeline
Published26 Sep 2026
Updated14 Oct 2026
First seen26 Sep 2026
Sources
CVE-2026-100586 · NVD
CVE-2026-100586 · MITRE
CVE-2026-100586 · OSV
GHSA-9p6m-2872-xm7x · GHSA
Track software like this
Free during beta