PT-2026-99197 · Openclaw · Openclaw
CVSS v4.0
7.7
High
| Vector | AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
OpenClaw versions prior to 2026.8.1
Description
An authorization bypass exists on macOS and Linux where Allow Always approvals for exact commands are persisted as path-only grants. This allows an attacker to reuse the same executable with different arguments to execute commands without triggering new approval prompts, which could lead to unauthorized access to internal services or files.
Recommendations
Update to version 2026.8.1.
Exploit
Fix
Incorrect Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Openclaw