GitHub Advisoryadvisory · npm

GHSA-p4x4-2r7f-wjxg OpenClaw gateway exec allow-always over-trusts positional carrier executables

HIGH Published 2026-04-01 Modified 2026-04-28 Official page ↗
Aliases
CVE-2026-41380
Ecosystem
npm
Packages
openclaw
Severity
High
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-863
Reviewed
2026-04-01

Affected packages

• npm openclaw: < 2026.3.28 → fixed in 2026.3.28

Description

Summary Allow-always persistence could trust wrapper carrier executables instead of the actual invoked target when commands were routed through dispatch wrappers. Impact A one-time approval could persist a broader future allowlist entry than the operator intended, weakening execution approval boundaries. Affected Component `src/infra/exec-approvals-allowlist.ts` Fixed Versions • Affected: `= 2026.3.28` • Latest stable `2026.3.28` contains the fix. Fix Fixed by commit `9ec44fad39` (`Exec approvals: reject wrapper carrier allow-always targets`).

Related

Alias · CVE (1)

  • CVE-2026-41380 OpenClaw before 2026.3.28 contains an execution approval vulnerability in exec-approvals-allowlist.ts that allows allow-always persistence… vulnerability

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References