CVE-2026-100552

Name of the Vulnerable Software and Affected Versions openclaw versions prior to 2026.8.1

Description The software fails to correctly enforce per-chat tool policies for Codex app-server runtime tools. Specifically, a conversation-level tools.allow rule filters OpenClaw tools but fails to restrict the shell, process, file, and patch tools owned by the Codex runtime. This allows a participant in a lower-trust conversation, restricted by a per-chat tool allowlist, to bypass the configuration and access native command and file tools. The actual impact is determined by the host permissions and sandbox configuration of the runtime.

Recommendations Update openclaw to version 2026.8.1.