All vulnerabilities
CVE-2026-100586GHSA-9p6m-2872-xm7x

OpenClaw Codex before 2026.7.1 Authorization Bypass via Bind

OpenClaw OpenClaw
Open in ThreatlineRecord JSON
CVSS
8.7High
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.25%Chance of exploitation activity in the next 30 days, higher than 14% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in2026.7.1Fixed versionCVE List
Published26 Sep 2026Updated 28 Sep 2026CVE List

What fixes it

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

OpenClaw Codex before 2026.7.1 fails to properly enforce owner authorization when creating native conversation bindings. Non-owner channel senders with command access can create bindings to the native Codex runtime and execute host-capable turns with access to files, tools, and processes.

Text from CVE List

Affected versions 2

  • OpenClawaffected: all versions before 2026.7.1CVE List
  • OpenClawunaffected: 2026.7.1CVE List

References 2