high8.3
CVE-2026-100568
OpenClaw versions before 2026.8.1 fail to properly restrict access to operator command cron jobs, allowing model-visible agent callers to read and execute owne…
Impact
OpenClaw versions before 2026.8.1 fail to properly restrict access to operator command cron jobs, allowing model-visible agent callers to read and execute ownerless command jobs. Attackers can inspect stored environment variables and force-run disabled or unscheduled command jobs to access secrets and execute operator-authored commands.
Affected products
| Product | Affected versions |
|---|---|
| OpenClaw | before 2026.8.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.