CVE-2026-101879Proof of concept (PoC) published · CISA
OpenClaw Windows Node before 2026.7.1-3 Missing Authorization
CVSS score
7.1
EPSS probability
%0.3
Risk score
0.0
Published
14 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
4.8
CVE-2026-110689
OpenClaw ClawScan Static Scanner runner.go shouldSkipTargetPath protection mechanism
O
Patch verified
9.8
CVE-2026-32917
OS command injection in Openclaw
O
Patch verifiedEPSS %3
8.7
CVE-2026-53822
OpenClaw < 2026.5.18 - Command Argument Modification via Shell Wrapper Between Approval and Execution
O
Patch status unknownEPSS %2
9.3
CVE-2026-8634
Crabbox < v0.12.0 Environment Variable Information Disclosure
O
Patch verifiedEPSS %1
9.3
CVE-2026-28474
OpenClaw Nextcloud Talk < 2026.2.6 - Allowlist Bypass via actor.name Display Name Spoofing
O
Patch verifiedEPSS %1
8.8
CVE-2026-53836
Vulnerability in Openclaw
O
Patch verifiedEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-101879"