# CVE-2026-101880: OpenClaw Windows Node authorization bypass in exec-approval policy

Source: https://junglewise.ai/threats/cve-2026-101880-openclaw-windows-node-before-2026-7-1-contains-an-incorrect  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-30. Updated: 2026-09-30  
License: CC BY 4.0 with a link back

CVE-2026-101880 · Severity: high · CVSS 8.8 · Published 2026-09-30

OpenClaw Windows Node is a gateway component that manages command execution across Windows infrastructure. The exec-approval policy contains a flaw where the parser fails to properly analyze compound commands with pipe operators or command substitutions, allowing authenticated gateways or agents to execute arbitrary commands by disguising denied operations behind allowed prefixes. This breaks the intended command approval controls and enables attackers with network access to the gateway to run unauthorized code on Windows hosts.

Technologies: [Openclaw Windows Node](https://junglewise.ai/threats/technologies/windows-node). Vendors: [Openclaw](https://junglewise.ai/threats/vendors/openclaw).

## Quick answers

**Is CVE-2026-101880 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-101880 being exploited in the wild.

**How severe is CVE-2026-101880?** High severity, with a CVSS score of 8.8, published 30 September 2026.

**Which products and versions are affected?** Openclaw Windows Node before 2026.7.1.

**Is there a fix for CVE-2026-101880?** A patch was published on 2026-07-20: Fix committed improving compound command evaluation in ExecShellWrapperParser Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-101880 attacked?** It is attacked over the network.

**Am I affected by CVE-2026-101880?** Check whether you run Openclaw Windows Node at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The ExecShellWrapperParser in versions before 2026.7.1 does not correctly split commands on pipe operators or extract command substitutions, allowing attackers to bypass approval rules via compound command syntax. An authenticated network attacker can craft commands that place blocked commands after pipe operators (|) or within command substitution syntax, causing the parser to approve the command as if only the allowed prefix was present. The vulnerability affects the system.run exec-approval policy and requires network access to a connected gateway or agent.

## Affected products

- OpenClaw Windows Node before 2026.7.1

## Timeline

- 2026-09-30: disclosed
- 2026-07-20: patched: Fix committed improving compound command evaluation in ExecShellWrapperParser

## References

- [https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/ExecShellWrapperParser.cs](https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/ExecShellWrapperParser.cs)
- [https://github.com/openclaw/openclaw-windows-node/commit/2077aa3e7159101bddcee2f4efcb9d604a81619e](https://github.com/openclaw/openclaw-windows-node/commit/2077aa3e7159101bddcee2f4efcb9d604a81619e)

## Related threats

- [OpenClaw Windows Node environment-variable injection in system.run](https://junglewise.ai/threats/cve-2026-101884-openclaw-windows-node-before-2026-7-1-contains-an-incomplete)
- [OpenClaw Windows Node server-side request forgery in canvas.present](https://junglewise.ai/threats/cve-2026-101883-openclaw-windows-node-through-2026-9-4-contains-a-server-side)
- [OpenClaw Windows Node incomplete validation in exec approvals](https://junglewise.ai/threats/cve-2026-101882-openclaw-windows-node-before-2026-7-1-contains-an-incomplete)
- [OpenClaw Windows Node memory exhaustion in WebSocket transport](https://junglewise.ai/threats/cve-2026-101881-openclaw-windows-node-before-2026-7-1-contains-an-allocation-of)
- [OpenClaw Windows Node missing authorization in capture handlers](https://junglewise.ai/threats/cve-2026-101879-openclaw-windows-node-before-2026-7-1-3-contains-a-missing)