Cpe:2.3:a:openclaw:windows_node:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3aopenclawwindows_node/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 30 Sep 2026 20:36:42 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgAuthorization Bypass in OpenClaw Windows Node via Command Injectionhttps://feed.craftedsignal.io/briefs/2026-09-openclaw-auth-bypass/Wed, 30 Sep 2026 20:36:42 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-09-openclaw-auth-bypass/An incorrect authorization vulnerability in OpenClaw Windows Node version < 2026.7.1 allows unauthenticated agents to achieve arbitrary command execution by bypassing command approval policies.OpenClaw Windows Node version 2026.7.1 and earlier contains an incorrect authorization vulnerability in the system.run exec-approval policy. The vulnerability resides within the ExecShellWrapperParser component, which fails to correctly tokenize or sanitize input commands. Specifically, the parser does not properly handle pipe operators or command substitution syntax, allowing a malicious or compromised gateway/agent to append denied commands to otherwise authorized prefixes. By exploiting this parsing logic, an attacker can bypass defined approval rules, leading to unauthorized arbitrary command execution on the host operating system. This issue poses a high risk to organizations relying on OpenClaw for automated system management and task execution.

Impact

Successful exploitation allows for arbitrary code execution on systems running the OpenClaw Windows Node. This can lead to full system compromise, lateral movement within the environment, and exfiltration of sensitive data, depending on the privileges of the service account running the OpenClaw node agent.

Recommendation

Update all instances of OpenClaw Windows Node to version 2026.7.1 or later immediately. Review audit logs for system.run command executions that contain pipe characters or command substitution syntax to identify potential prior exploitation attempts.

]]>highadvisoryvulnerabilitycommand-injectionexecution