OpenClaw Exec Approval Allowlist Overmatching Vulnerability
Summary
GHSA-f8r2-vg7x-gh8m: OpenClaw: Exec approval allowlist patterns overmatched on POSIX paths. Affects openclaw versions < 2026.3.11. Fixed in 2026.3.11. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenClaw is an open-source package designed for executing commands in a controlled environment, primarily used in Node.js applications. It provides an exec approval allowlist feature that ensures only approved commands can be executed, enhancing security by preventing unauthorized command execution. However, a vulnerability was discovered that allows for overmatching of allowlist patterns, potentially compromising the intended security measures.
Vulnerability Detail
The vulnerability arises from the matchesExecAllowlistPattern function, which improperly normalizes patterns and targets by lowercasing them and using overly broad glob matching on POSIX paths. Specifically, the ? wildcard can match the / character, allowing matches to cross path segments. This can lead to unintended commands or executable paths being approved, posing a security risk as operators may inadvertently allow execution of malicious commands.
How To Fix
Latest published version: 2026.10.6 as of 22 Oct 2026
npm install openclaw@2026.10.6Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
2026.3.11
This is the first release that contains the fix.
npm install openclaw@2026.3.11Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, you can manually review and restrict the patterns in your exec allowlist to ensure they do not inadvertently allow unauthorized commands. However, the best solution is to update to the patched version.
Conclusion
The OpenClaw exec approval allowlist vulnerability poses a significant risk by allowing unintended command execution due to overmatching patterns. It is crucial to update to version 2026.3.11 or later to mitigate this risk effectively. Regular monitoring for vulnerabilities using tools like Vulert can help maintain the security of your applications.
See every vulnerability recorded for openclaw →
FAQ
The vulnerability allows for overmatching of exec allowlist patterns, which can lead to unintended command execution.
You can use Vulert's playground at Vulert Scanner to check if your application is affected without needing to sign up.
The CVSS score of this vulnerability is 6.9, indicating a moderate severity level.
If an immediate update is not possible, review and restrict your exec allowlist patterns to minimize risk until you can apply the patch.
You can find more information about OpenClaw and its features on its official GitHub repository.
References
Related vulnerabilities
Recent vulnerabilities recorded for openclaw.
