OpenClaw Windows Node before 2026.7.1 contains an incorrect authorization vulnerability in the system.run exec-approval policy where ExecShellWrapperParser fails to split commands on pipe operators or extract command substitutions. Connected gateways or agents can bypass approval rules by placing denied commands behind allowed prefixes using pipe operators or command substitution syntax, achieving arbitrary command execution on Windows hosts.

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact High

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation poc

Automatable no

Technical Impact total

Affected Vendors & Products

Vendors Products
Openclaw
  • Openclaw Windows Node

No data.

No data.

References
Link Providers
https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/ExecShellWrapperParser.cs#L253 cve-icon cve-icon
https://github.com/openclaw/openclaw-windows-node/commit/2077aa3e7159101bddcee2f4efcb9d604a81619e cve-icon cve-icon
https://github.com/openclaw/openclaw-windows-node/releases/tag/v2026.7.1 cve-icon cve-icon
https://github.com/openclaw/openclaw-windows-node/security/advisories/GHSA-r3x2-vf2f-vvj8 cve-icon cve-icon cve-icon
https://github.com/openclaw/openclaw-windows-node/security/advisories/GHSA-vg38-vjq2-vgvh cve-icon cve-icon
https://www.vulncheck.com/advisories/openclaw-windows-node-before-2026.7.1-authorization-bypass cve-icon cve-icon
History

Thu, 01 Oct 2026 17:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Thu, 01 Oct 2026 16:00:00 +0000

Type Values Removed Values Added
First Time appeared Openclaw
Openclaw openclaw Windows Node
Vendors & Products Openclaw
Openclaw openclaw Windows Node

Wed, 30 Sep 2026 19:30:00 +0000

Type Values Removed Values Added
Description OpenClaw Windows Node before 2026.7.1 contains an incorrect authorization vulnerability in the system.run exec-approval policy where ExecShellWrapperParser fails to split commands on pipe operators or extract command substitutions. Connected gateways or agents can bypass approval rules by placing denied commands behind allowed prefixes using pipe operators or command substitution syntax, achieving arbitrary command execution on Windows hosts.
Title OpenClaw Windows Node before 2026.7.1 Authorization Bypass
Weaknesses CWE-863
References
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published: 2026-09-30T19:16:01.717Z

Updated: 2026-09-30T19:34:05.680Z

Reserved: 2026-09-28T15:44:45.389Z

Link: CVE-2026-101880

cve-icon Vulnrichment

Updated: 2026-09-30T19:33:58.908Z

cve-icon NVD

Status : Deferred

Published: 2026-09-30T20:17:18.857

Modified: 2026-10-01T02:20:29.877

Link: CVE-2026-101880

cve-icon Redhat

No data.