High-Risk Allowlist Bypass Vulnerability in OpenClaw Package
Summary
GHSA-ffhm-8fwq-7q27: Duplicate Advisory: OpenClaw: PowerShell encoded-command aliases could miss exec allowlist checks. Affects openclaw versions < 2026.5.12. Fixed in 2026.5.12. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
OpenClaw is an open-source package available on npm that facilitates the execution of PowerShell commands. It is designed to enhance the usability of PowerShell scripts by allowing users to run encoded commands easily. However, a critical vulnerability has been identified in versions prior to 2026.5.12, which compromises the security of the command execution process.
Vulnerability Detail
The vulnerability arises from an allowlist bypass in OpenClaw's handling of PowerShell encoded commands. Attackers can exploit this flaw by using abbreviated flag aliases that are not recognized by the allowlist parser. This allows remote authenticated operators to execute arbitrary PowerShell content without proper validation, leading to potential unauthorized access and execution of malicious commands. The CVSS score for this vulnerability is 8.8, indicating a high severity level.
How To Fix
Latest published version: 2026.10.6 as of 22 Oct 2026
npm install openclaw@2026.10.6Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
2026.5.12
This is the first release that contains the fix.
npm install openclaw@2026.5.12Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can restrict the use of abbreviated flag aliases in your PowerShell scripts until you can update to the patched version. This can be done by implementing stricter validation checks in your command execution logic.
Conclusion
The OpenClaw package has a critical vulnerability that allows for an allowlist bypass in PowerShell encoded-command handling. It is essential to update to version 2026.5.12 or later to mitigate this risk. Implementing temporary workarounds can help secure your application until the update is applied.
See every vulnerability recorded for openclaw →
FAQ
The vulnerability allows attackers to bypass execution allowlist checks by using unrecognized encoded-command alias forms, enabling them to execute arbitrary PowerShell content.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. By utilizing the Vulert playground, you can check if your application is affected without any signup.
The CVSS score for this vulnerability is 8.8, indicating a high severity level.
If you cannot update immediately, implement stricter validation checks in your PowerShell scripts to restrict the use of abbreviated flag aliases as a temporary workaround.
You can find more information about OpenClaw on its GitHub repository and npm page, where you can also access the latest updates and documentation.
Related vulnerabilities
Recent vulnerabilities recorded for openclaw.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
