CVE-2026-100560CWE-863broken-access-control

CVE-2026-100560

High · published September 26, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
46.9
In the wild
Unconfirmed
What it is

OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability where Allow Always approvals for exact commands persist as path-only grants on macOS and Linux. Attackers can reuse the same executable with different arguments to execute commands without triggering new approval prompts, potentially accessing files or internal services.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
7.7 · CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00578 · 46.9th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2026-09-26T07:17Z
References (2)
https://github.com/openclaw/openclaw/security/advisories/GHSA-74gc-hg2m-79p9 · [email protected]https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-reusable-exec-approvals-authorization-bypass · [email protected]
EPSS history
Timeline
  • 27 SEP 03:24Z
    EPSS moved — → 1%
    epss
  • 26 SEP 02:18Z
    OpenClaw before 2026.8.1 Reusable Exec Approvals Authorization Bypass
    cvelistv5