CVE-2026-101880 describes an incorrect authorization vulnerability in OpenClaw Windows Node prior to version 2026.7.1. The flaw is in the system.run exec-approval policy where the ExecShellWrapperParser fails to correctly split commands on pipe operators or extract command substitutions. As a result, an attacker with access to connected gateways or agents can bypass command approval rules by embedding denied commands behind allowed prefixes using pipes or command substitution syntax. This bypass enables arbitrary command execution on Windows hosts running the vulnerable software.

Successful exploitation allows an attacker with limited privileges on connected gateways or agents to bypass command approval policies and execute arbitrary commands on Windows hosts. This can lead to unauthorized system control and potential compromise of the affected host. The CVSS 4.0 score of 8.7 (high severity) reflects the network attack vector, low attack complexity, no user interaction, and high impact on confidentiality, integrity, and availability.

A fix is available in OpenClaw Windows Node version 2026.7.1. Users should upgrade to version 2026.7.1 or later to remediate this vulnerability. Until patched, restrict access to connected gateways and agents to trusted users only to reduce risk.