Anagnorisis2Peripeteia

**Name of the Vulnerable Software and Affected Versions** OpenClaw versions prior to 2026.8.1 **Description** An authorization bypass exists on macOS and Linux where Allow Always approvals for exact commands are persisted as path-only grants. This allows an attacker to reuse the same executable with different arguments to execute commands without triggering new approval prompts, which could lead to unauthorized access to internal services or files. **Recommendations** Update to version 2026.8.1.

**Name of the Vulnerable Software and Affected Versions** OpenClaw versions 2026.3.22 through 2026.8.0 **Description** An approval-bypass flaw exists in the exec approval policy. The policy may trust a command-running wrapper without inspecting the command contained within its arguments. If an operator previously allowlisted or permanently approved a benign wrapper invocation, a subsequent agent turn could substitute an arbitrary inner command. This allows the execution of the command with the host privileges of the OpenClaw process without requiring a new approval prompt. This issue affects transparent shell carriers and opaque utilities, including process monitors, tracers, namespace tools, and proxy wrappers, due to trust-resolution gaps. Exploitation requires the wrapper to resolve on the host and a prior operator approval for that wrapper. **Recommendations** Update to version 2026.8.1.

**Name of the Vulnerable Software and Affected Versions** OpenClaw versions prior to 2026.8.1 **Description** An authorization bypass exists in the 'sessions.create' endpoint. This issue allows users with `operator.write` permissions to modify session configurations that should be restricted to the `operator.admin` scope. By manipulating the `model`, `provider`, `thinking level`, and `auth-profile` variables, an attacker can redirect traffic and circumvent administrative access controls. **Recommendations** Update to version 2026.8.1 or later. Restrict the use of the 'sessions.create' endpoint for users with `operator.write` permissions until the update is applied.

**Name of the Vulnerable Software and Affected Versions** OpenClaw versions prior to 2026.8.1 **Description** The Control UI fails to neutralize leading characters that spreadsheet applications interpret as formulas when exporting session data to CSV. A lower-trust participant capable of influencing a session label or the first user message can inject a formula-like cell into the Usage export. If an operator opens this export in a spreadsheet application with formula evaluation enabled, the cell may be executed with the permissions of the spreadsheet user. This is a CSV injection issue where the software does not properly sanitize input before exporting it to a format that can be interpreted as executable code by other applications. **Recommendations** Update to version 2026.8.1.

**Name of the Vulnerable Software and Affected Versions** OpenClaw versions prior to 2026.8.1 **Description** The software fails to neutralize spreadsheet formula characters in participant display names during attendance CSV exports. This allows attackers to inject formula-like cells that execute with the permissions of the spreadsheet user when the exported file is opened in applications that support formulas. **Recommendations** Update to version 2026.8.1.