CVE-2026-100580

Summary

The flaw in OpenClaw (npm package 'openclaw') before 2026.7.1 allows an attacker to create a persistent cron job that executes arbitrary commands with the privileges of the OpenClaw process user, leading to potential host file and credential access.

Exploitability

Exploitation requires an actor able to steer a tool-enabled agent and knowledge of the mixed-case payload technique. Precondition is the use of the model-facing cron tool.

Blast radius

If exploited, the attacker can gain access to host files and credentials, impacting scheduled service availability.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to OpenClaw 2026.7.1 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.