CVE-2026-101884
Last modified
CVE-2026-101884 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. OpenClaw Windows Node before 2026.7.1 contains an incomplete environment-variable sanitizer in system.run that fails to block GIT_CONFIG_*, DOTNET_STARTUP_HOOKS, and JAVA_TOOL_OPTIONS variables. Attackers with gateway or agent access can supply these variables to allowlisted tools like git, dotnet, or java to load attacker-controlled code and achieve arbitrary code execution..
Description
OpenClaw Windows Node before 2026.7.1 contains an incomplete environment-variable sanitizer in system.run that fails to block GIT_CONFIG_*, DOTNET_STARTUP_HOOKS, and JAVA_TOOL_OPTIONS variables. Attackers with gateway or agent access can supply these variables to allowlisted tools like git, dotnet, or java to load attacker-controlled code and achieve arbitrary code execution.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| OpenClaw | OpenClaw Windows Node | < 2026.7.1 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-101884?
How severe is CVE-2026-101884?
How do I fix CVE-2026-101884?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-101879OpenClaw Windows Node before 2026.7.1-3 contains a missing a…6.5
- CVE-2026-10188A flaw has been found in Tenda W12 3.0.0.7(4763). This affec…8.8
- CVE-2026-101880OpenClaw Windows Node before 2026.7.1 contains an incorrect …8.8
- CVE-2026-101881OpenClaw Windows Node before 2026.7.1 contains an allocation…6.5
- CVE-2026-101882OpenClaw Windows Node before 2026.7.1 contains an incomplete…8.8
- CVE-2026-101883OpenClaw Windows Node through 2026.9.4 contains a server-sid…5.4
- CVE-2026-101885ZeroClaw versions before 0.8.5 built with plugins-wasm featu…7.8
- CVE-2026-101886Cisco Jabber for Android (com.cisco.im) before 15.3.1.311364…4
- CVE-2026-101887BlueALSA (bluez-alsa/bluealsad) contains a division-by-zero …3.5
- CVE-2026-101888The Prime Mover plugin for WordPress before 2.2.1 contains a…7.2
- CVE-2026-101889The Prime Mover plugin for WordPress before 2.2.1 contains a…6.5
- CVE-2026-10189A vulnerability has been found in Tenda W12 3.0.0.7(4763). T…8.8
Are you affected by CVE-2026-101884?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST