CyberRota Analysis
AI-GeneratedOpenClaw Codex versions prior to 2026.7.1 are vulnerable due to inadequate enforcement of owner authorization when establishing native conversation bindings. This flaw allows non-owner users with command access to create bindings to the Codex runtime, potentially enabling them to execute host-capable commands and access sensitive files, tools, and processes. Organizations using affected versions should prioritize patching to mitigate the risk of unauthorized access and potential data breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
OpenClaw Codex before 2026.7.1 fails to properly enforce owner authorization when creating native conversation bindings. Non-owner channel senders with command access can create bindings to the native Codex runtime and execute host-capable turns with access to files, tools, and processes.