OpenClaw Windows Node: Remote code execution via exec approval rules

Summary

OpenClaw Windows Node before 2026.7.1 accepts exec approval rules through system.execApprovals.set that use wildcard executables and abusable Windows system binaries such as mshta, rundll32 and certutil. A caller with a valid session can add broad allow rules and then run arbitrary commands on the Windows host through system.run without operator checks or user prompts. The vendor's CVSS 4.0 score is 8.7 (high).

Affected

• OpenClaw Windows Node from 0 to before 2026.7.1
• Relevant when the "Run system tools" capability is enabled

Fixed in

• Version 2026.7.1

Workaround

• Disable "Run system tools" on nodes that do not need it, as the vendor advisory ties exploitability to this setting
• Unknown: no vendor workaround documented beyond this

Exploitation

• In the wild: No evidence found, no KEV listing
• Public PoC: Conflicting information; CISA SSVC lists exploitation as "poc", other sources report no public PoC
• Automatable: no (CISA SSVC)

Our recommendation

• Update OpenClaw Windows Node to 2026.7.1 or later and verify the version on every Windows host
• Until patched, disable "Run system tools" on nodes that do not need it
• Protect gateway and MCP tokens and restrict which callers can reach the node
• Monitor for unexpected launches of mshta, rundll32 or certutil, especially from the node process
• Treat as high priority where the node runs with "Run system tools" enabled

Public exploits iAttack code is publicly available (PoC on GitHub, Metasploit or Exploit-DB).

PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.

Research sources

• GitHub security advisory GHSA-f32j-8759-w2fp github.com
• GitHub security advisory GHSA-g95v-c9r6-2hmq github.com
• Fix commit 8f07ad92beb28376bc228c0b07093173a043a656 github.com
• Release v2026.7.1 github.com
• VulnCheck advisory www.vulncheck.com
• OSV entry CVE-2026-101882 osv.dev
• Redpacket Security CVE alert www.redpacketsecurity.com

Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 1 Nov 2026, 06:33.