The vulnerability in OpenClaw (CVE-2026-100584) affects versions >=2026.2.26 and <2026.7.1. It involves a flaw in PowerShell command analysis on Windows hosts running in exec allowlist mode. The system approves an exact executable resolved from the PATH environment but may execute a same-named executable located in the agent-writable workspace directory instead. This discrepancy allows an attacker who can place a malicious executable with an approved basename into the workspace and influence approved PowerShell commands that use bare executable names to execute arbitrary code with the privileges of the Gateway or node-host user. The vulnerability does not require replacing the approved executable itself. The issue is fixed in version 2026.7.1. A workaround is to avoid using bare executable names in approved PowerShell commands and to keep executable files out of agent-writable workspaces.

Successful exploitation allows arbitrary code execution with the privileges of the Gateway or node-host user on affected Windows hosts. This can lead to full compromise of the affected system. The vulnerability requires the ability to place executables in the agent-writable workspace and to influence approved PowerShell commands using bare executable names. The CVSS v3.1 score is 6.7 (medium severity), reflecting local attack vector, high impact on confidentiality, integrity, and availability, but requiring low privileges and user interaction.

Version 2026.7.1 contains a fix for this vulnerability and should be applied to affected systems. As a workaround before patching, avoid using bare executable names in approved PowerShell commands and ensure that executable files are not placed in agent-writable workspaces. No other vendor advisory or patch information is provided; check vendor sources for updates.