CVE-2026-100586
Received Received - Intake

OpenClaw Codex Native Conversation Binding Authorization Bypass

Publication date: 2026-09-26

Last updated on: 2026-09-26

Assigner: VulnCheck

Description
OpenClaw Codex before 2026.7.1 fails to properly enforce owner authorization when creating native conversation bindings. Non-owner channel senders with command access can create bindings to the native Codex runtime and execute host-capable turns with access to files, tools, and processes.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-26
Last Modified
2026-09-26
Generated
2026-09-26
AI Q&A
2026-09-26
EPSS Evaluated
N/A
NVD
CVE-2026-100586
EUVD
EUVD-2026-87465

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
openclaw codex to 2026.7.1 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-269 The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

OpenClaw Codex before version 2026.7.1 fails to enforce owner authorization when creating native conversation bindings. Non-owner channel senders with command access can create bindings to the native Codex runtime and execute host-capable turns, gaining access to files, tools, and processes.

Detection Guidance

Check OpenClaw Codex versions before 2026.7.1 by running commands like 'npm list openclaw-codex' or inspecting installed package versions. Look for unauthorized native conversation bindings created by non-owner senders with command access.

Impact Analysis

An attacker with command access but not owner status could bind a conversation to the native Codex runtime and execute privileged actions. This may allow unauthorized access to sensitive files, system tools, or processes, depending on the runtime's permissions and host environment configuration.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, tools, and processes within the Codex runtime, which may violate compliance requirements under GDPR (data protection) and HIPAA (healthcare data privacy). Unauthorized file or process access risks exposing personal or protected health information, potentially resulting in regulatory penalties or breaches of confidentiality.

Mitigation Strategies

Upgrade OpenClaw Codex to version 2026.7.1 or later. Disable Codex bind commands in channels with non-owner participants before upgrading. Ensure proper authorization checks are enforced for native bindings.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-100586. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart