Shell Positional Parameters Vulnerability in OpenClaw: Inline-Eval Bypass Risk
Summary
GHSA-27pq-2ph8-8x25: Duplicate Advisory: Shell positional parameters could weaken strict inline-eval checks. Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenClaw is an open-source tool designed for managing and executing shell commands within a controlled environment. It allows users to define a set of allowed commands and parameters, ensuring that only approved actions can be performed. However, prior to version 2026.4.2, OpenClaw was susceptible to a vulnerability that could undermine its strict command execution policies, potentially allowing unauthorized command execution.
Vulnerability Detail
The vulnerability arises from an inline-eval bypass that allows authenticated operators to exploit shell positional parameters. By manipulating these parameters, attackers can circumvent the strict allowlist checks intended to secure command execution. This could lead to the execution of unapproved shell-provided content, posing significant security risks, including unauthorized access and data manipulation.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can limit the use of shell positional parameters in their command definitions until the package is updated. This can help mitigate the risk of exploitation while awaiting the official patch.
Conclusion
The vulnerability in OpenClaw related to shell positional parameters poses a significant risk by allowing unauthorized command execution. Users are strongly advised to update to the latest version to mitigate this risk and ensure the integrity of their command execution environment.
See every vulnerability recorded for openclaw →
FAQ
The vulnerability allows authenticated users to bypass strict command execution policies by exploiting shell positional parameters.
You can use Vulert's playground at Vulert Scanner to check if your application is affected without needing to sign up.
Exploitation of this vulnerability could lead to unauthorized command execution, data breaches, and potential system compromise.
Yes, updating to OpenClaw version 2026.4.2 or later will patch the vulnerability.
The CVSS score of this vulnerability is 8.1, indicating a high severity level.
Related vulnerabilities
Recent vulnerabilities recorded for openclaw.
