CVE-2026-100560 | BDVDB-2026-379804 Detail

Description#

OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability where Allow Always approvals for exact commands persist as path-only grants on macOS and Linux. Attackers can reuse the same executable with different arguments to execute commands without triggering new approval prompts, potentially accessing files or internal services.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-09-26Record published in the CVE List.
2. Version 22026-09-30Most recent update recorded in the CVE List.