CVE-2026-100560: OpenClaw before 2026.8.1 Reusable Exec Approvals Authorization Bypass
OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability where Allow Always approvals for exact commands persist as path-only grants on macOS and Linux. Attackers can reuse the same executable with different arguments to execute commands without triggering new approval prompts, potentially accessing files or internal services.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
OpenClawto a version that resolves this vulnerability.Fixed in 2026.8.1
Event History
Frequently Asked Questions
Which systems are affected by this approval bypass?
The issue affects OpenClaw versions before 2026.8.1 on macOS and Linux. It applies where an exact command has received an Allow Always approval.
What does an attacker need to exploit this issue?
An attacker needs to reuse an executable that already has a persistent Allow Always approval. They can invoke that executable with different arguments without causing a new approval prompt.
Are default approval settings affected?
The available information identifies persistent Allow Always approvals as the affected condition. It does not state that systems without such approvals are affected.
What is the impact of reusing an approved executable?
Different arguments can be used to execute commands without renewed authorization, potentially enabling access to files or internal services.