CVE-2026-100561
Received Received - Intake

Approval-Bypass in OpenClaw npm Package

Publication date: 2026-09-26

Last updated on: 2026-09-26

Assigner: VulnCheck

Description
OpenClaw (npm package 'openclaw') versions >= 2026.3.22 and < 2026.8.1 contain an approval-bypass flaw in the exec approval policy: the policy could trust a command-running wrapper without inspecting the command carried in its arguments. After an operator allowlisted or permanently approved a benign wrapper invocation, a later agent turn could substitute an arbitrary inner command and execute it with the OpenClaw process's host privileges without a further approval prompt. Exploitation requires the relevant wrapper to resolve on the host and a prior operator decision allowing that wrapper. Transparent shell carriers and opaque utilities such as process monitors, tracers, namespace tools, and proxy wrappers were affected through related trust-resolution gaps. Fixed in 2026.8.1.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-26
Last Modified
2026-09-26
Generated
2026-09-26
AI Q&A
2026-09-26
EPSS Evaluated
N/A
NVD
CVE-2026-100561
EUVD
EUVD-2026-87489

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-88 The product constructs a string for a command to be executed by a separate component in another control sphere, but it does not properly delimit the intended arguments, options, or switches within that command string.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

OpenClaw versions between 2026.3.22 and below 2026.8.1 have an approval-bypass flaw in the exec approval policy. The policy could trust a command-running wrapper without checking the command inside its arguments. If an operator previously approved a harmless wrapper, an attacker could later replace the command with a malicious one and execute it with the OpenClaw process's host privileges without needing further approval.

Detection Guidance

To detect this vulnerability, check if your system uses OpenClaw versions between 2026.3.22 and below 2026.8.1. Run 'npm list openclaw' to verify the installed version. Inspect command-running wrappers, process monitors, tracers, or proxy wrappers for allowlisted invocations that could be exploited.

Impact Analysis

This vulnerability allows attackers to execute arbitrary commands with high privileges on systems running vulnerable OpenClaw versions. If a wrapper was previously approved, attackers can bypass security controls and run malicious code, potentially leading to data breaches, system compromise, or unauthorized access. The impact depends on the privileges of the OpenClaw process.

Compliance Impact

This vulnerability could lead to unauthorized command execution, potentially violating data protection and privacy requirements under GDPR and HIPAA. It may result in unauthorized access to sensitive data, compromising confidentiality and integrity, and could lead to non-compliance with regulatory obligations for access controls and audit logging.

Mitigation Strategies

Immediately upgrade OpenClaw to version 2026.8.1 or later. Remove any standing approvals for command-running wrappers. Avoid allowlisting wrapper executables for arbitrary arguments. Require per-invocation approval for commands using shell carriers, monitors, tracers, namespace tools, or proxy wrappers.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-100561. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart