Incorrect authorization in OpenClaw - CVE-2026-100560
Published: November 3, 2026
Vulnerability details
The vulnerability allows a remote attacker to bypass command approval prompts and potentially disclose local files, overwrite user-writable files, or access internal services.
The vulnerability exists due to incorrect authorization in OpenClaw's reusable exec approval mechanism when an operator's Allow Always approval for an exact command is persisted as a path-only grant. A remote attacker can influence the agent through untrusted content to reuse the previously approved executable with different target or output arguments to perform unauthorized operations without another approval prompt.
The issue is limited to generated Allow Always entries on macOS and Linux; operator-authored path-only allowlist rules are outside the advisory's scope.