Authorization Bypass Vulnerability in OpenClaw by OpenClaw Team

CVE-2026-100560

What is CVE-2026-100560?

OpenClaw versions prior to 2026.8.1 exhibit an authorization bypass vulnerability that allows attackers to reuse previously approved commands with altered arguments. On macOS and Linux, 'Allow Always' approvals for exact commands remain as path-only grants, enabling unauthorized command execution without additional approval prompts. This could potentially lead to unauthorized access to sensitive files or internal services, underscoring the need for timely updates to prevent exploitation.

References