CVE-2026-101880

OpenClaw Windows Node before version 2026.7.1 contains an incorrect authorization vulnerability in the system.run exec-approval policy where ExecShellWrapperParser fails to split commands on pipe operators or extract command substitutions. Connected gateways or agents can bypass approval rules by placing denied commands behind allowed prefixes using pipe operators or command substitution syntax, achieving arbitrary command execution on Windows hosts.

An attacker with gateway or agent access can bypass approval mechanisms and execute arbitrary commands on the Windows host, potentially leading to full system compromise and security breach.

Upgrade OpenClaw Windows Node to version 2026.7.1 or later, which includes a fix for the command parser. Restrict access to gateways and agents and monitor executed commands.