OpenClaw Vulnerability: Executable Rebind Risk in system.run Approvals
Summary
GHSA-q86m-697p-h7fh: Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-q399-23r3-hfx4. Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenClaw is an open-source package designed for executing system commands in a controlled environment. It allows users to run commands with specified parameters, making it a powerful tool for automation and scripting. However, versions prior to 2026.3.1 have a critical vulnerability that affects the integrity of executable identities during command execution, potentially allowing unauthorized command execution.
Vulnerability Detail
The vulnerability arises from OpenClaw's failure to properly bind the executable identity for non-path-like argv[0] tokens in system.run approvals. This oversight permits attackers to alter the PATH resolution after an approval has been granted, enabling them to execute a different binary than what was originally approved by the operator. The ramifications of this vulnerability include arbitrary command execution, which can lead to unauthorized access and control over the system.
How To Fix
No fixed version is published for this vulnerability.
To rectify this vulnerability, users should update OpenClaw to version 2026.3.1 or later. This can be done by running the following command in your terminal: 'npm install openclaw@latest'. This command will ensure that you are using the patched version of the package that addresses this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can avoid using system.run approvals until they have updated to the patched version. Additionally, ensure that the PATH environment variable is not modifiable by untrusted users to mitigate the risk of executable rebind attacks.
Conclusion
The OpenClaw vulnerability related to executable rebind risks in system.run approvals poses a significant threat to system integrity. Users are strongly encouraged to update to the latest version to protect against potential exploits. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for openclaw →
FAQ
The vulnerability has a CVSS score of 6.0, indicating a moderate severity level.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Visit Vulert Scanner to check if your application is affected without needing to sign up.
If exploited, this vulnerability can lead to arbitrary command execution, allowing attackers to gain unauthorized access and control over the affected system.
Yes, the vulnerability has been patched in OpenClaw version 2026.3.1. Users should update to this version or later to mitigate the risk.
If you cannot update immediately, avoid using system.run approvals and restrict modifications to the PATH environment variable to minimize risk.
Related vulnerabilities
Recent vulnerabilities recorded for openclaw.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.