GitHub Advisoryadvisory · npm

GHSA-6pfc-6m7w-m8fx OpenClaw has a gateway exec allowlist allow-always bypass via unregistered /usr/bin/script wrapper

HIGH Published 2026-03-31 Modified 2026-04-28 Official page ↗
Aliases
CVE-2026-41390
Ecosystem
npm
Packages
openclaw
Severity
High
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-385
Reviewed
2026-03-31

Affected packages

• npm openclaw: < 2026.3.28 → fixed in 2026.3.28

Description

Summary Allow-always persistence did not unwrap `/usr/bin/script` and similar wrappers to the actual executed target before storing trust decisions. Impact A user approval for one wrapped command could persist trust for a wrapper binary that later executed a different underlying program. Affected Component `src/infra/dispatch-wrapper-resolution.ts, src/infra/exec-wrapper-resolution.ts` Fixed Versions • Affected: `= 2026.3.28` • Latest stable `2026.3.28` contains the fix. Fix Fixed by commit `83da3cfe31` (`infra: unwrap script wrapper approval targets`).

Related

Alias · CVE (1)

  • CVE-2026-41390 OpenClaw before 2026.3.28 contains an exec allowlist bypass vulnerability where allow-always persistence fails to unwrap /usr/bin/script… vulnerability

Weakness · CWE (1)

  • CWE-385 Covert Timing Channel weakness

References