CVE-2026-101880: OpenClaw Windows Node before 2026.7.1 Authorization Bypass
OpenClaw Windows Node before 2026.7.1 contains an incorrect authorization vulnerability in the system.run exec-approval policy where ExecShellWrapperParser fails to split commands on pipe operators or extract command substitutions. Connected gateways or agents can bypass approval rules by placing denied commands behind allowed prefixes using pipe operators or command substitution syntax, achieving arbitrary command execution on Windows hosts.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
OpenClaw Windows Nodeto a version that resolves this vulnerability.Fixed in 2026.7.1
Event History
Frequently Asked Questions
Which deployments are exposed?
OpenClaw Windows Node versions before 2026.7.1 are affected where connected gateways or agents can reach the system.run exec-approval policy.
What access does an attacker need?
An attacker needs access through a connected gateway or agent and sufficient ability to submit commands evaluated by system.run. They can place a denied command after an allowed prefix using pipe operators or command-substitution syntax.
What is the impact of a successful bypass?
A successful bypass can result in arbitrary command execution on the Windows host, with high impacts to confidentiality, integrity, and availability.
How can I determine whether my environment is affected?
Check whether the affected host runs OpenClaw Windows Node earlier than 2026.7.1 and whether connected gateways or agents can invoke system.run under exec-approval rules.