Vulnerability in Openclaw
CVE-2026-100580
OpenClaw (npm package 'openclaw') before 2026.7.1 improperly handles case sensitivity in the model-facing cron tool: a mixed-case payload kind can pass the agent-facing shell-execution guard and later normalize into a command job. An actor able to steer a tool-enabled agent can therefore create a persistent cron job that executes attacker-selected commands with the privileges of the OpenClaw process user, resulting in access to host files and credentials and impact to scheduled service availability. The issue is limited to cron jobs created or edited through the model-facing cron tool; direct CLI and authorized Gateway scheduling surfaces are trusted operator controls. Fixed in 2026.7.1.
Published .
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.
Affected products
Weakness classification (CWE)
References
- github.com/openclaw/openclaw/security/advisories/GHSA-8xxh-v4vc-qvm4 (vendor-advisory)
- www.vulncheck.com/advisories/openclaw-before-2026.7.1-remote-code-execution-via… (third-party-advisory)
Frequently asked questions
- What is CVE-2026-100580?
- CVE-2026-100580 is a high-severity vulnerability in Openclaw, classified under Improper Handling of Case Sensitivity. CVSS score: 8.8/10. Published 2026-09-26.
- How severe is CVE-2026-100580?
- High severity. CVSS v3 base score is 8.8 out of 10.