Input Validation Bypass in OpenClaw Package - Arbitrary File Operations Vulnerability

openclaw Updated 19 Mar 2026

Summary

19/03/2026

Disclosed on

LOW

Severity

No i

Fix available

Low

Severity

3.6

CVSS Score

GHSA-ggm6-h3mx-cmmp: Duplicate Advisory: safeBins stdin-only bypass via sort output and recursive grep flags. Affects openclaw versions < 2026.2.17. No fix is published. How to fix ↓

Free scan

Check if this vulnerability affects your application

Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.

Check my app free

No signup required · Results in about 60 seconds

Upload your dependency manifest or SBOM

Drag & drop your file here or Browse

Java Javascript PHP Python Go Rust Ruby Dart C/C++ Elixir CycloneDX SPDX

Upload a supported dependency manifest or SBOM. No installation or source-code access required.

See supported files and SBOM formats

SBOM sbom.json · bom.json · bom.xml · *.spdx.json · *.cdx.json · *.cdx.xml

Java pom.xml · gradle.lockfile · buildscript-gradle.lockfile

Javascript package-lock.json · yarn.lock · pnpm-lock.yaml

PHP composer.lock

Python poetry.lock · requirements.txt · Pipfile.lock

Go go.mod

Rust Cargo.lock

Ruby Gemfile.lock

Dart pubspec.lock

C/C++ conan.lock

Elixir mix.lock

Enter your work email to receive your report link.

Verify your email to view the full report and start 30 days of continuous monitoring. No credit card required.

Background

OpenClaw is an npm package designed for executing command-line tools and scripts within a controlled environment. It provides functionalities to manage and execute commands while ensuring security through input validation. However, certain versions of OpenClaw are vulnerable to an input validation bypass that can lead to unintended filesystem operations.

Vulnerability Detail

The vulnerability arises from a flaw in the tools.exec.safeBins feature of OpenClaw versions prior to 2026.2.19. Attackers can exploit this flaw to execute unintended filesystem operations by leveraging the sort output flags or recursive grep flags. Specifically, attackers with command execution access can use the sort -o flag to perform arbitrary file writes or the grep -R flag for recursive file reads, thus circumventing the intended stdin-only restrictions. This could lead to unauthorized access to sensitive files or manipulation of the filesystem.

How To Fix

No fixed version is published for this vulnerability.

To rectify the vulnerability, update OpenClaw to version 2026.2.19 or later. You can do this by running the following command in your terminal: npm install openclaw@2026.2.19. This will ensure that you have the patched version that addresses the input validation bypass issue.

Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →

Workaround

As a temporary workaround, restrict command execution access to trusted users only, and avoid using the sort -o and grep -R flags in your commands until the package is updated.

Conclusion

The input validation bypass vulnerability in OpenClaw poses a risk of unauthorized filesystem operations. It is crucial to update to the patched version 2026.2.19 or later to mitigate this risk. Additionally, using tools like Vulert can help monitor for vulnerabilities in your applications.

See every vulnerability recorded for openclaw →