CVE-2026-101882

Summary

The flaw in OpenClaw Windows Node allows remote attackers to execute arbitrary commands by exploiting incomplete validation in system.execApprovals.set, potentially leading to full system compromise.

Exploitability

Exploitation is relatively straightforward given the preconditions of having write access to system.execApprovals.set and knowledge of abusable system binaries.

Blast radius

If exploited, this vulnerability could result in full control of the Windows host, including data exfiltration, lateral movement, and further exploitation of the network.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to OpenClaw Windows Node 2026.7.1 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.