Zero Day MonitorZDM

← Back to list

8.8

CVE-2026-100587PATCHED

openclaw · openclaw

OpenClaw before 2026.7.1 Authorization Bypass via Codex Install

Description

OpenClaw versions before 2026.7.1 fail to properly validate owner authorization in the Codex computer-use installation command. Non-owner channel senders can install arbitrary plugins and execute MCP processes with OpenClaw user privileges, affecting host confidentiality, integrity, and availability.

Affected Products

Vendor	Product	Versions
openclaw	openclaw	0

References

https://github.com/openclaw/openclaw/security/advisories/GHSA-pjjr-5qhr-5w6r(vendor-advisory)
https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-codex-install(third-party-advisory)

Related News (1 articles)

Tier C

VulDB2d ago

CVE-2026-100587 | OpenClaw up to 2026.7.0 improper authorization

→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.18.8 HIGH

VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA KEV❌ No

Actively exploited❌ No

Patch available

2026.7.1

CWECWE-862

PublishedSep 26, 2026

Last enriched1d ago

Trending Score22

Source articles1

Independent1

Info Completeness0/14

Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

MEDIUMCVE-2026-100604EXP

ClawHub Authentication Bypass via Former Publisher Skill Control

HIGHCVE-2026-100599EXP

OpenClaw 2026.5.1 before 2026.7.1 Remote Code Execution via googlemeet.chrome

HIGHCVE-2026-100588

OpenClaw before 2026.7.1 Authentication Bypass via node.invoke

HIGHCVE-2026-100580

OpenClaw before 2026.7.1 Remote Code Execution via cron tool

HIGHCVE-2026-100579

OpenClaw before 2026.7.1 Authentication Bypass via Spoofed Requester

Pin to Dashboard

Verification

State: unverified

Confidence: 0%

Vulnerability Timeline

CVE Published

Sep 26, 2026

Discovered by ZDM

Sep 26, 2026

Patch Available

Sep 26, 2026