Junglewise Threat Intelligence

CVE-2026-100560: OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability where Allow Always approvals for exact commands persist as p

CVE-2026-100560 · Severity: high · CVSS 7.5 · Published 2026-09-26

Executive brief

OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability where Allow Always approvals for exact commands persist as path-only grants on macOS and Linux. Attackers can reuse the same executable with different arguments to execute commands without triggering new approval prompts, potentially accessing files or internal services.

References