Vulnerability in Openclaw
CVE-2026-100580
OpenClaw (npm package 'openclaw') before 2026.7.1 improperly handles case sensitivity in the model-facing cron tool: a mixed-case payload kind can pass the agent-facing shell-execution guard and later normalize into a command job. An actor able to steer a tool-enabled agent can therefore create a persistent cron job that executes attacker-selected commands with the privileges of the OpenClaw process user, resulting in access to host files and credentials and impact to scheduled service availability. The issue is limited to cron jobs created or edited through the model-facing cron tool; direct CLI and authorized Gateway scheduling surfaces are trusted operator controls. Fixed in 2026.7.1.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.003 (28.0th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 28th percentile — 28.0% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.003 · change: 0.000
Affected products
Weakness classification (CWE)
References
- GitHub Security Advisory (GHSA-8xxh-v4vc-qvm4) (vendor-advisory)
- VulnCheck Advisory: OpenClaw before 2026.7.1 Remote Code Execution via cron tool (third-party-advisory)
Frequently asked questions
- What is CVE-2026-100580?
- CVE-2026-100580 is a high-severity vulnerability in Openclaw, classified under Improper Handling of Case Sensitivity. CVSS score: 8.8/10. Published 2026-09-26.
- How severe is CVE-2026-100580?
- High severity. CVSS v3 base score is 8.8 out of 10.