High
OpenClaw before 2026.7.1 Authorization Bypass via Codex Install
Type: advisorySource: Official CVE List
OpenClaw versions before 2026.7.1 fail to properly validate owner authorization in the Codex computer-use installation command. Non-owner channel senders can install arbitrary plugins and execute MCP processes with Op…
Products: OpenClawCVEs: CVE-2026-100587