Allowlist Bypass in OpenClaw Agent Runtime by OpenClaw

CVE-2026-100584

What is CVE-2026-100584?

The OpenClaw Agent Runtime is susceptible to an allowlist bypass, allowing arbitrary code execution on Windows systems. In versions from 2026.2.26 to just below 2026.7.1, the security feature intended to restrict command execution can be circumvented. Specifically, when an approved PowerShell command uses a bare executable name, the system may execute a potentially malicious executable that resides in the workspace directory instead of the intended executable in the specified PATH. This scenario is particularly dangerous if lower-trust content manages to place its executable with the same name in the writable workspace. To mitigate this risk, users should avoid using bare executable names in PowerShell commands and ensure that executable files are not placed within agent-writable workspaces. The issue is resolved in version 2026.7.1.

References