CVE-2026-100586: OpenClaw Codex before 2026.7.1 Authorization Bypass via Bind
OpenClaw Codex before 2026.7.1 fails to properly enforce owner authorization when creating native conversation bindings. Non-owner channel senders with command access can create bindings to the native Codex runtime and execute host-capable turns with access to files, tools, and processes.
Affected Software
Event History
Frequently Asked Questions
Which environments are exposed?
OpenClaw Codex deployments running a version before 2026.7.1 are exposed when non-owner channel senders have command access. The provided information does not establish whether this condition exists in a default configuration.
What access does an attacker need?
An attacker needs to be a non-owner channel sender with command access. The vulnerability is network-reachable, requires low privileges, and does not require user interaction.
What is the impact after exploitation?
An attacker can create a binding to the native Codex runtime and execute host-capable turns. Those turns can access files, tools, and processes, affecting confidentiality, integrity, and availability.
What version should be deployed to address this issue?
Upgrade OpenClaw Codex to version 2026.7.1 or later. Versions before 2026.7.1 are identified as affected.