GitHub Advisoryadvisory · npm

GHSA-vmqr-rc7x-3446 OpenClaw's non-default safeBins sort configuration can bypass intended allowlist approval constraints

MEDIUM Published 2026-03-03 Modified 2026-03-18 Official page ↗
Aliases
CVE-2026-22169
Ecosystem
npm
Packages
openclaw
Severity
Moderate
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-15, CWE-78
Reviewed
2026-03-03

Affected packages

• npm openclaw: < 2026.2.22 → fixed in 2026.2.22

Description

When `sort` is explicitly added to `tools.exec.safeBins` (non-default), the `--compress-program` option can invoke an external helper and bypass the intended safe-bin approval constraints in allowlist mode. Affected Packages / Versions • Package: `openclaw` (npm) • Vulnerable versions: `=2026.2.22`). Once that npm release is published, the advisory can be published directly. OpenClaw thanks @tdjackey for reporting.

Related

Alias · CVE (1)

  • CVE-2026-22169 OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in the safeBins configuration that allows attackers to… vulnerability

Weakness · CWE (2)

  • CWE-15 External Control of System or Configuration Setting weakness
  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References