CVE-2026-100559
HIGH
NVD
CVSS Score
8
Severity
HIGH
Published
Sep 26, 2026
Vendor
unknown
Description
OpenClaw versions before 2026.8.1 contain a command parser vulnerability where escaped newlines confuse exec allowlist parsing, allowing hidden commands to execute. Attackers can craft input with escaped newlines to bypass allowlist validation and execute additional commands without expected authorization prompts.