Summary
Command mismatch can bypass execution approval. This high-severity finding affects OpenClaw.
Disclosure timeline
- Public disclosure
Credits
Cantina · Agent-discovered and human-verified
Vulnerability disclosure
Command mismatch can bypass execution approval
CVE-2026-26325
- Affected product
- OpenClaw
- Severity
- High · CVSS 7.2
- Weakness
- CWE-284
- Disclosed