CVE-2026-100530 OpenClaw before 2026.8.1 Exec Approval Directory Binding
Attackers can reuse approved commands in unintended directories, leading to unauthorized execution or data modification in OpenClaw.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2026-100530?
CVE-2026-100530 is a high-severity missing authorization vulnerability in OpenClaw, published on 26 Sep 2026. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
OpenClaw versions before 2026.8.1 fail to bind working directory context to reusable exec approvals, allowing approved commands to execute in different directories. Attackers with an allow-always approval can reuse it to run the same command against unreviewed files or repositories with materially different effects.
Weakness: CWE-863
Which versions are affected by CVE-2026-100530?
How do I fix CVE-2026-100530?
Upgrade to a fixed version.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2026-100530 being exploited?
There is no known exploitation of CVE-2026-100530 in the wild and no public exploit code.
Sources
Also known as GHSA-3mq7-q27j-mq7q, GHSA-r2gv-4qcw-qpqv, MINI-w9mx-7q6w-cfpq.