Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: OpenClaw Windows Node 2026.7.1 Clear all filters
TI-2026-65190 CVE-2026-101882 · GHSA-fgh6-hxpr-2f88

OpenClaw Windows Node before 2026.7.1 Remote Code Execution via system.execApprovals.set

Priority HIGH 73

OpenClaw Windows Node before 2026.7.1 contains an incomplete validation vulnerability in system.execApprovals.set that accepts wildcard-executable rules and abusable system binaries like mshta, rundll32, and certutil.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00668 Published 2026-09-30 Fixed in 2026.7.1 CWE-184
TI-2026-65189 CVE-2026-101881 · GHSA-xxhw-cvh5-24pv

OpenClaw Windows Node before 2026.7.1 Denial of Service

Priority MEDIUM 64

OpenClaw Windows Node before 2026.7.1 contains an allocation of resources without limits vulnerability in the gateway WebSocket transport that allows connected gateways to exhaust node memory.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.0037 Published 2026-09-30 Fixed in 2026.7.1 CWE-770
TI-2026-65188 CVE-2026-101880 · GHSA-q2pm-2vxc-m78g

OpenClaw Windows Node before 2026.7.1 Authorization Bypass

Priority HIGH 73

OpenClaw Windows Node before 2026.7.1 contains an incorrect authorization vulnerability in the system.run exec-approval policy where ExecShellWrapperParser fails to split commands on pipe operators or extract command sub…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00685 Published 2026-09-30 Fixed in 2026.7.1 CWE-863