Allowlist Bypass Vulnerability in OpenClaw Package
Summary
GHSA-3846-mfvc-xwpf: Duplicate Advisory: Exec allowlist wrapper analysis did not unwrap env/shell dispatch chains. Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenClaw is an open-source package designed for executing system commands in a controlled environment. It utilizes an allowlist mechanism to ensure that only specified commands can be executed, enhancing security by preventing unauthorized command execution. However, versions prior to 2026.2.22 are vulnerable to a bypass that allows attackers to execute non-allowlisted commands through wrapper binaries.
Vulnerability Detail
The vulnerability arises from a flaw in the system.run exec analysis of OpenClaw, which fails to properly unwrap environment and shell-dispatch wrapper chains. This allows attackers to route execution through binaries like 'env' or 'bash', enabling them to smuggle payloads that satisfy the allowlist while executing commands that are not on the allowlist. The potential ramifications include unauthorized command execution, which could lead to data breaches or system compromise.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, avoid using OpenClaw versions prior to 2026.2.22, and consider implementing additional security measures such as restricting access to the execution environment or using alternative methods for command execution until the package can be updated.
Conclusion
In summary, the OpenClaw package has a critical allowlist bypass vulnerability that affects versions prior to 2026.2.22. It is essential to update to the patched version to mitigate the risks associated with unauthorized command execution. Utilizing tools like Vulert can help monitor for such vulnerabilities in real-time.
See every vulnerability recorded for openclaw →
FAQ
The CVSS score of this vulnerability is 7.1, indicating a high severity level.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. By analyzing your package-lock.json file, Vulert provides real-time alerts. You can also check your application using the Vulert playground at Vulert Scanner without any signup.
The risks include unauthorized command execution, which can lead to data breaches, system compromise, and other security incidents.
Yes, a patch is available in version 2026.2.22 of OpenClaw. It is recommended to update to this version or later.
If you cannot update the package immediately, consider implementing additional security measures, such as restricting access to the execution environment or using alternative methods for command execution.
References
Related vulnerabilities
Recent vulnerabilities recorded for openclaw.
