GitHub Advisoryadvisory · npm

GHSA-jj82-76v6-933r OpenClaw's exec allowlist wrapper analysis did not unwrap env/shell dispatch chains

HIGH Published 2026-03-03 Modified 2026-03-20 Official page ↗
Aliases
CVE-2026-27566
Ecosystem
npm
Packages
openclaw
Severity
High
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
Weaknesses
CWE-78, CWE-863
Reviewed
2026-03-03

Affected packages

• npm openclaw: < 2026.2.22 → fixed in 2026.2.22

Description

Summary `system.run` exec allowlist analysis treated wrapper binaries as the effective executable and did not fully unwrap `env`/shell-dispatch wrappers. This allowed wrapper-smuggled payloads (for example `env bash -lc ...`) to satisfy an allowlist entry for the wrapper while executing non-allowlisted commands. Impact On affected versions, an actor who can trigger `system.run` requests under an allowlist policy could bypass intended allowlist restrictions by routing execution through wrapper binaries. Affected Packages / Versions • Package: `openclaw` (npm) • Affected: `= 2026.2.22`). After npm `2026.2.22` is published, this advisory can be published directly without further metadata edits. OpenClaw thanks @tdjackey for reporting.

Related

Alias · CVE (1)

  • CVE-2026-27566 OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in system.run exec analysis that fails to unwrap env and… vulnerability

Weakness · CWE (2)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness
  • CWE-863 Incorrect Authorization weakness

References