GHSA-7q2j-c4q5-rm27 OpenClaw macOS deep link confirmation truncation can conceal executed agent message

• npm openclaw: >= 2026.2.6-0, < 2026.2.14 → fixed in 2026.2.14

Summary OpenClaw macOS desktop client registers the `openclaw://` URL scheme. For `openclaw://agent` deep links without an unattended `key`, the app shows a confirmation dialog that previously displayed only the first 240 characters of the message, but executed the full message after the user clicked "Run". At the time of writing, the OpenClaw macOS desktop client is still in beta. An attacker could pad the message with whitespace to push a malicious payload outside the visible preview, increasing the chance a user approves a different message than the one that is actually executed. Impact If a user runs the deep link, the agent may perform actions that can lead to arbitrary command execution depending on the user's configured tool approvals/allowlists. This is a social-engineering mediated vulnerability: the confirmation prompt could be made to misrepresent the executed message. Affected Versions • OpenClaw macOS desktop client versions >= 2026.2.6 and = 2026.2.14`.