CVE-2026-100584
Received Received - Intake

Path Traversal in OpenClaw Agent Runtime

Publication date: 2026-09-26

Last updated on: 2026-09-26

Assigner: VulnCheck

Description
OpenClaw is an npm-distributed agent runtime. In versions >= 2026.2.26 and < 2026.7.1, PowerShell command analysis on Windows hosts running in exec allowlist mode could approve an exact executable resolved from PATH but subsequently execute a same-named executable located in the workspace directory. If lower-trust content can place an executable with an approved basename into an agent-writable workspace and steer an approved PowerShell command that uses a bare executable name, OpenClaw may run the workspace file instead of the allowlisted path, executing arbitrary code with the privileges of the Gateway or node-host user. The issue does not require replacement of the approved executable itself. Version 2026.7.1 contains a fix; as a workaround, avoid bare executable names in approved PowerShell commands and keep executable files out of agent-writable workspaces.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-26
Last Modified
2026-09-26
Generated
2026-09-26
AI Q&A
2026-09-26
EPSS Evaluated
N/A
NVD
CVE-2026-100584
EUVD
EUVD-2026-87467

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
openclaw openclaw From 2026.2.26 (inc) to 2026.7.1 (exc)
openclaw openclaw 2026.7.1
openclaw openclaw 2026.2.26
openclaw openclaw From 2026.2.26 (inc) to 2026.7.1 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-426 The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-100584 is a vulnerability in OpenClaw versions between 2026.2.26 and 2026.7.1 on Windows systems. It involves a flaw where PowerShell command analysis could approve an executable from the system PATH but later execute a same-named executable from a workspace directory due to shadowing. This occurs when using exec allowlist mode with a PowerShell command and a workspace-controlled executable sharing the approved basename.

Detection Guidance

Check OpenClaw versions between 2026.2.26 and 2026.7.1 on Windows systems. Look for PowerShell commands using bare executable names in exec allowlist mode. Inspect workspace directories for executables matching allowlisted names.

Impact Analysis

An attacker could exploit this by placing a malicious executable in the workspace, tricking OpenClaw into running it instead of the allowlisted path. This would execute arbitrary code with the privileges of the Gateway or node-host user, potentially compromising confidentiality, integrity, and availability of the system.

Compliance Impact

This vulnerability could lead to unauthorized code execution, potentially violating data protection requirements under GDPR (e.g., unauthorized access to personal data) and HIPAA (e.g., unauthorized access to protected health information). The impact on compliance depends on the system's role in processing regulated data.

Mitigation Strategies

Upgrade OpenClaw to version 2026.7.1 or later. Avoid using bare executable names in approved PowerShell commands. Ensure no executable files exist in agent-writable workspaces.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-100584. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart