Approval-Bypass Vulnerability in OpenClaw npm Package from OpenClaw

CVE-2026-100561

What is CVE-2026-100561?

OpenClaw versions from 2026.3.22 to just below 2026.8.1 are prone to an approval-bypass vulnerability in the exec approval policy. This flaw allows a command-wrap wrapper, once approved by an operator, to execute arbitrary commands without an additional approval prompt. It exploits trust gaps, enabling a later agent to substitute harmful commands under the wrapper's privileges, potentially compromising system integrity. The issue can affect various utilities such as process monitors and namespace tools. Users are urged to upgrade to version 2026.8.1 or later to mitigate this risk.

References