{"id":"CVE-2026-101882","published":"2026-09-30T20:17:19.790","lastModified":"2026-10-01T16:17:33.000","description":"OpenClaw Windows Node before 2026.7.1 contains an incomplete validation vulnerability in system.execApprovals.set that accepts wildcard-executable rules and abusable system binaries like mshta, rundll32, and certutil. Remote callers can add broad allow rules to execute arbitrary commands on the Windows host through system.run without operator checks or user prompts.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-184"],"vendors":[],"products":[],"references":[{"url":"https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/Capabilities/SystemCapability.cs#L791-L853","tags":[]},{"url":"https://github.com/openclaw/openclaw-windows-node/commit/8f07ad92beb28376bc228c0b07093173a043a656","tags":[]},{"url":"https://github.com/openclaw/openclaw-windows-node/commit/988df5badc84ab5efd5b4e291766a1fa5e7e268a","tags":[]},{"url":"https://github.com/openclaw/openclaw-windows-node/releases/tag/v2026.7.1","tags":[]},{"url":"https://github.com/openclaw/openclaw-windows-node/security/advisories/GHSA-f32j-8759-w2fp","tags":[]},{"url":"https://github.com/openclaw/openclaw-windows-node/security/advisories/GHSA-g95v-c9r6-2hmq","tags":[]},{"url":"https://www.vulncheck.com/advisories/openclaw-windows-node-before-2026.7.1-remote-code-execution-via-system-execapprovals-set","tags":[]},{"url":"https://github.com/openclaw/openclaw-windows-node/security/advisories/GHSA-f32j-8759-w2fp","tags":[]},{"url":"https://github.com/openclaw/openclaw-windows-node/security/advisories/GHSA-g95v-c9r6-2hmq","tags":[]}],"exploitRefs":[{"url":"https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/Capabilities/SystemCapability.cs#L791-L853","tags":[]},{"url":"https://github.com/openclaw/openclaw-windows-node/commit/8f07ad92beb28376bc228c0b07093173a043a656","tags":[]},{"url":"https://github.com/openclaw/openclaw-windows-node/commit/988df5badc84ab5efd5b4e291766a1fa5e7e268a","tags":[]},{"url":"https://github.com/openclaw/openclaw-windows-node/releases/tag/v2026.7.1","tags":[]},{"url":"https://github.com/openclaw/openclaw-windows-node/security/advisories/GHSA-f32j-8759-w2fp","tags":[]},{"url":"https://github.com/openclaw/openclaw-windows-node/security/advisories/GHSA-g95v-c9r6-2hmq","tags":[]},{"url":"https://github.com/openclaw/openclaw-windows-node/security/advisories/GHSA-f32j-8759-w2fp","tags":[]},{"url":"https://github.com/openclaw/openclaw-windows-node/security/advisories/GHSA-g95v-c9r6-2hmq","tags":[]}],"hasPoc":true,"ai":{"summary":"The flaw in OpenClaw Windows Node allows remote attackers to execute arbitrary commands by exploiting incomplete validation in system.execApprovals.set, potentially leading to full system compromise.","exploitability":"Exploitation is relatively straightforward given the preconditions of having write access to system.execApprovals.set and knowledge of abusable system binaries.","blast_radius":"If exploited, this vulnerability could result in full control of the Windows host, including data exfiltration, lateral movement, and further exploitation of the network.","remediation":"Upgrade to OpenClaw Windows Node 2026.7.1 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","cmd-exec","windows","remote"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-03T08:51:14.306Z"}}