OpenClaw versions prior to 2026.8.1 are vulnerable to an unauthorized access flaw that allows authenticated users to execute sensitive command jobs and expose environment secrets.

This vulnerability is an improper access control issue (CWE-200) where low-privileged, authenticated model-visible agent callers can interact with operator-level cron jobs. By exploiting this, an attacker can read stored environment variables and force the execution of disabled or unscheduled tasks.

The ability to access environment variables and execute arbitrary command jobs presents a severe risk to organizational security, as it likely leads to the compromise of hard-coded credentials, API keys, or internal system configurations. With a CVSS score of 8.3, this high-severity vulnerability could facilitate lateral movement or full system compromise within the OpenClaw environment, resulting in significant data breaches and potential operational disruption.

Immediate Action: Update the OpenClaw software to version 2026.8.1 or later to implement the necessary access restrictions on cron jobs.

Proactive Monitoring: Review system access logs for unusual activity related to cron job execution or unauthorized attempts to access agent caller endpoints.

Compensating Controls: If immediate patching is not feasible, restrict network access to the OpenClaw management interface and ensure that only trusted, hardened agents are permitted to interact with the system.

Public Exploit Available: No

Given the high CVSS score and the direct impact on system secrets and command execution, this vulnerability poses a significant risk to the integrity and confidentiality of the OpenClaw platform. Administrators should prioritize the deployment of version 2026.8.1 immediately to close the access control gap and prevent potential unauthorized command execution by malicious or compromised agents.