GitHub Advisoryadvisory · npm

GHSA-v3qc-wrwx-j3pw OpenClaw: Agentic Consent Bypass — LLM Agent Can Silently Disable Exec Approval via `config.patch`

HIGH Published 2026-04-03 Modified 2026-04-03 Official page ↗
Ecosystem
npm
Packages
openclaw
Severity
High
CVSS vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N
Weaknesses
CWE-285
Reviewed
2026-04-03

Affected packages

• npm openclaw: < 2026.3.28 → fixed in 2026.3.28

Description

Summary Agentic Consent Bypass: LLM Agent Can Silently Disable Exec Approval via `config.patch` Current Maintainer Triage • Status: open • Normalized severity: high • Assessment: Maintainers accepted this issue, fixed it in 76411b2afc4ae721e36c12e0ea24fd23e2fed61e on 2026-03-27, and that fix shipped in v2026.3.28, so normalize it as a fixed released draft rather than a close-by-trust-model call. Affected Packages / Versions • Package: `openclaw` (npm) • Latest published npm version: `2026.3.31` • Vulnerable version range: `= 2026.3.28` • First stable tag containing the fix: `v2026.3.28` Fix Commit(s) • `76411b2afc4ae721e36c12e0ea24fd23e2fed61e` — 2026-03-27T09:42:15Z OpenClaw thanks @YLChen-007 for reporting.

Related

Weakness · CWE (1)

  • CWE-285 Improper Authorization weakness

References