OpenClaw Windows Node: Authorization bypass in exec approval policy

Summary

OpenClaw Windows Node before 2026.7.1 does not correctly split shell commands on pipe operators or extract command substitutions when checking exec approval rules. A connected gateway or agent that is allowed to run commands can place a denied command behind an allowed prefix and thereby execute arbitrary commands on the Windows host. The attack requires low privileges on the gateway or agent side and no user interaction.

Affected

• OpenClaw Windows Node versions prior to 2026.7.1 (CVE record: affected 0 to before 2026.7.1)

Fixed in

• Upgrade to 2026.7.1 or later. The vendor release page is the authoritative source for the exact first fixed build; the latest release is recommended because other CVEs affect later builds.

Workaround

• No workaround is documented by the vendor that could be confirmed.
• Unverified inference: until patching, disable the "Run system tools" switch on affected nodes and review or remove broad allow rules.

Exploitation

• No evidence of in-the-wild exploitation found. Not listed in CISA KEV according to one aggregator; the CISA KEV catalogue was not checked directly.
• CISA SSVC: exploitation status PoC, not automatable.
• No public proof of concept verified.

Our recommendation

• Inventory Windows hosts running OpenClaw Windows Node and record their versions.
• Upgrade to the latest release, not only 2026.7.1.
• Until patched, disable system tools on nodes that do not need them and tighten exec-approval allow rules.
• Restrict which gateways and agents can connect to the node.
• Monitor the node for unexpected command execution.

Public exploits iAttack code is publicly available (PoC on GitHub, Metasploit or Exploit-DB).

PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.

Research sources

• CVE record / VulnCheck advisory www.vulncheck.com
• Fix commit 2077aa3 github.com
• Release v2026.7.1 github.com
• GHSA-r3x2-vf2f-vvj8 (deny bypass) github.com
• GHSA-vg38-vjq2-vgvh (allowlist bypass) github.com
• Vulnerable source file ExecShellWrapperParser.cs github.com
• OSV entry CVE-2026-101880 osv.dev

Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 1 Nov 2026, 06:34.