CVE-2026-101882

OpenClaw Windows Node before 2026.7.1 contains an incomplete validation vulnerability in system.execApprovals.set that accepts wildcard-executable rules and abusable system binaries like mshta, rundll32, and certutil. Remote callers can add broad allow rules to execute arbitrary commands on the...

EUVD-2026-90255

OpenClaw Windows Node before 2026.7.1 contains an incomplete validation vulnerability in system.execApprovals.set that accepts wildcard-executable rules and abusable system binaries like mshta, rundll32, and certutil. Remote callers can add broad allow rules to execute arbitrary commands on the...

CVE-2026-101882 OpenClaw Windows Node before 2026.7.1 Remote Code Execution via system.execApprovals.set

OpenClaw Windows Node before 2026.7.1 contains an incomplete validation vulnerability in system.execApprovals.set that accepts wildcard-executable rules and abusable system binaries like mshta, rundll32, and certutil. Remote callers can add broad allow rules to execute arbitrary commands on the...

CVE-2026-101882

OpenClaw Windows Node versions prior to 2026.7.1 are vulnerable to Remote Code Execution (RCE) due to an incomplete validation flaw in the system.execApprovals.set function. The vulnerability allows remote callers to bypass security by adding broad allow rules that accept wildcard-executable rule...

CVE-2026-101882 OpenClaw Windows Node before 2026.7.1 Remote Code Execution via system.execApprovals.set

OpenClaw Windows Node before 2026.7.1 contains an incomplete validation vulnerability in system.execApprovals.set that accepts wildcard-executable rules and abusable system binaries like mshta, rundll32, and certutil. Remote callers can add broad allow rules to execute arbitrary commands on the...

CVE-2026-101882 OpenClaw Windows Node before 2026.7.1 Remote Code Execution via system.execApprovals.set

OpenClaw Windows Node before 2026.7.1 contains an incomplete validation vulnerability in system.execApprovals.set that accepts wildcard-executable rules and abusable system binaries like mshta, rundll32, and certutil. Remote callers can add broad allow rules to execute arbitrary commands on the...

PT-2026-103517

OpenClaw Windows Node before 2026.7.1 contains an incomplete validation vulnerability in system.execApprovals.set that accepts wildcard-executable rules and abusable system binaries like mshta, rundll32, and certutil. Remote callers can add broad allow rules to execute arbitrary commands on the...