GitHub Advisoryadvisory · npm

GHSA-f8r2-vg7x-gh8m OpenClaw: Exec approval allowlist patterns overmatched on POSIX paths

MEDIUM Published 2026-03-13 Modified 2026-03-13 Official page ↗
Ecosystem
npm
Packages
openclaw
Severity
Moderate
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Weaknesses
CWE-178, CWE-625
Reviewed
2026-03-13

Affected packages

• npm openclaw: < 2026.3.11 → fixed in 2026.3.11

Description

Summary `matchesExecAllowlistPattern` normalized patterns and targets with lowercasing and compiled glob matching too broadly on POSIX. In addition, the `?` wildcard could match `/`, which allowed matches to cross path segments. Impact These matching rules could overmatch allowlist entries and permit commands or executable paths that an operator did not intend to approve. Affected versions `openclaw` `<= 2026.3.8` Patch Fixed in `openclaw` `2026.3.11` and included in later releases such as `2026.3.12`. Exec allowlist matching now respects the intended path semantics, and regression tests cover the POSIX case-folding and slash-crossing cases.

Related

Weakness · CWE (2)

  • CWE-178 Improper Handling of Case Sensitivity weakness
  • CWE-625 Permissive Regular Expression weakness

References