HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-100530 — OpenClaw versions before 2026.8.1 fail to bind working directory context to reus...

·Source: NIST NVD

Updated:

Executive Summary

OpenClaw versions before 2026.8.1 fail to bind working directory context to reusable exec approvals, allowing approved commands to execute in different directories. Attackers with an allow-always approval can reuse it to run the same command against unreviewed files or repositories with materially different effects.

Analysis

OpenClaw versions before 2026.8.1 fail to bind working directory context to reusable exec approvals, allowing approved commands to execute in different directories. Attackers with an allow-always approval can reuse it to run the same command against unreviewed files or repositories with materially different effects. CVSS Score: 7.3. Published: 2026-09-26T03:16:58.367.

Indicators of Compromise (1)

CVE (1)
CVE-2026-100530
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Sep 26, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerability

Bitget resumes Bitcoin withdrawals after $387.5 million crypto heist

Cryptocurrency exchange Bitget has resumed Bitcoin withdrawals suspended after suspected North Korean hackers breached its systems last week and stole over $350 million. [...]

BleepingComputer
MEDIUMVulnerability

Nubank in talks to take over Monzo

Brazilian neobank Nubank is reportedly eyeing a takeover of UK digital bank Monzo, in a deal that would value the British challenger at $10 billion.

Finextra
MEDIUMVulnerability

US soldier gets 70 months in prison for extorting 10 tech, telecom firms

A former U.S. Army soldier has been sentenced to 70 months in prison for hacking and extorting at least 10 U.S. technology and telecommunications companies between April 2023 and December 2024. [...]

BleepingComputer