GitHub Advisoryadvisory · npm

GHSA-3hcm-ggvf-rch5 OpenClaw has an exec allowlist bypass via command substitution/backticks inside double quotes

HIGH Published 2026-02-17 Modified 2026-03-06 Official page ↗
Aliases
CVE-2026-28470
Ecosystem
npm
Packages
openclaw
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-78, CWE-88
Reviewed
2026-02-17

Affected packages

• npm openclaw: < 2026.2.2 → fixed in 2026.2.2

Description

Summary Exec approvals allowlist bypass via command substitution/backticks inside double quotes. Affected Packages / Versions • Package: `openclaw` (npm) • Affected: `= 2026.2.2` Impact Only affects setups that explicitly enable the optional exec approvals allowlist feature. Default installs are unaffected. Fix Reject unescaped `$()` and backticks inside double quotes during allowlist analysis. Fix Commit(s) • d1ecb46076145deb188abcba8f0699709ea17198 Thanks @simecek for reporting.

Related

Alias · CVE (1)

  • CVE-2026-28470 OpenClaw versions prior to 2026.2.2 contain an exec approvals (must be enabled) allowlist bypass vulnerability that allows attackers to… vulnerability

Weakness · CWE (2)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness
  • CWE-88 Improper Neutralization of Argument Delimiters in a Command weakness

References