Skip to content
OpenAdvisories

Product · OpenClaw

OpenClaw Windows Node

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2026-101884

    OpenClaw Windows Node before 2026.7.1 Remote Code Execution via Environment Override

    OpenClaw Windows Node before 2026.7.1 contains an incomplete environment-variable sanitizer in system.run that fails to block GIT_CONFIG_*, DOTNET_STARTUP_HOOKS, and JAVA_TOOL_OPTIONS variables. Attackers with gateway or agent access can supply these variable…

    OpenClaw OpenClaw Windows Node Windows
  • High 8.8
    CVE-2026-101882

    OpenClaw Windows Node before 2026.7.1 Remote Code Execution via system.execApprovals.set

    OpenClaw Windows Node before 2026.7.1 contains an incomplete validation vulnerability in system.execApprovals.set that accepts wildcard-executable rules and abusable system binaries like mshta, rundll32, and certutil. Remote callers can add broad allow rules …

    OpenClaw OpenClaw Windows Node Windows
  • High 8.8
    CVE-2026-101880

    OpenClaw Windows Node before 2026.7.1 Authorization Bypass

    OpenClaw Windows Node before 2026.7.1 contains an incorrect authorization vulnerability in the system.run exec-approval policy where ExecShellWrapperParser fails to split commands on pipe operators or extract command substitutions. Connected gateways or agent…

    OpenClaw OpenClaw Windows Node Windows