CVE-2026-100560 OpenClaw before 2026.8.1 Reusable Exec Approvals Authorization Bypass
Attackers can bypass command approval prompts in OpenClaw by reusing executable paths with different arguments, enabling unauthorized code execution.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2026-100560?
CVE-2026-100560 is a high-severity authentication bypass vulnerability in OpenClaw, published on 26 Sep 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability where Allow Always approvals for exact commands persist as path-only grants on macOS and Linux. Attackers can reuse the same executable with different arguments to execute commands without triggering new approval prompts, potentially accessing files or internal services.
Weakness: CWE-863
Which versions are affected by CVE-2026-100560?
How do I fix CVE-2026-100560?
Upgrade to a fixed version.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2026-100560 being exploited?
There is no known exploitation of CVE-2026-100560 in the wild and no public exploit code.
Sources
Also known as GHSA-74gc-hg2m-79p9, GHSA-xp58-99vr-2354, MINI-48v6-4vc9-hrpj.