Shell Expansion Vulnerability in OpenClaw Package Allows Unauthorized File Access
Summary
GHSA-gwcq-453v-2frr: Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-mhq8-78pj-5j79. Affects openclaw versions < 2026.5.18. Fixed in 2026.5.18. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenClaw is an open-source package designed for managing and executing commands on POSIX nodes. It features a system.run safe-bin allowlist that is intended to restrict command execution to a predefined set of safe commands. However, a flaw in its validation process has been identified, which could potentially allow authenticated users to exploit shell metacharacters, leading to unauthorized access to sensitive files.
Vulnerability Detail
The vulnerability arises from inadequate validation in the system.run safe-bin allowlist of OpenClaw prior to version 2026.5.18. This flaw allows authenticated operators to use shell metacharacters in approved commands, which can modify command interpretation. As a result, attackers may read unintended node-local files, exposing sensitive configuration data. The severity of this vulnerability is rated high, with a CVSS score of 8.3, indicating a significant risk to affected systems.
How To Fix
Latest published version: 2026.10.6 as of 22 Oct 2026
npm install openclaw@2026.10.6Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
2026.5.18
This is the first release that contains the fix.
npm install openclaw@2026.5.18Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can restrict the use of shell metacharacters in your command inputs until the package is updated. This can be done by sanitizing user inputs and validating them against a strict regex pattern that disallows any shell metacharacters.
Conclusion
In summary, the OpenClaw package has a significant vulnerability that allows shell expansion through its system.run safe-bin allowlist. It is crucial to update to version 2026.5.18 or later to mitigate this risk. For those unable to update immediately, sanitizing inputs can serve as a temporary measure.
See every vulnerability recorded for openclaw →
FAQ
The vulnerability allows authenticated users to exploit shell metacharacters in commands, potentially leading to unauthorized access to sensitive files.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The CVSS score of this vulnerability is 8.3, indicating a high severity level.
If an immediate update is not possible, ensure to sanitize user inputs to prevent the use of shell metacharacters as a temporary workaround.
You can find more information about OpenClaw and its vulnerabilities on its GitHub repository and by monitoring platforms like Vulert.
Related vulnerabilities
Recent vulnerabilities recorded for openclaw.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.