OpenClaw Vulnerability: Inline Eval Approval Bypass
Summary
GHSA-q2gc-xjqw-qp89: Impact strictInlineEval explicit-approval boundary bypassed by approval-timeout fallback on gateway and node exec hosts. Affects openclaw versions < 2026.4.8. Fixed in 2026.4.8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
OpenClaw is a user-controlled local assistant designed to enhance user productivity by automating tasks and providing assistance. It allows users to execute commands and scripts locally, relying on a trust model that assumes a single-tenant environment. However, a critical vulnerability has been identified that compromises the integrity of its approval mechanism for inline eval commands.
Vulnerability Detail
The vulnerability arises from a flaw in the strictInlineEval feature, which is intended to require explicit approval for executing inline eval commands. Due to a fallback mechanism triggered by approval timeouts on gateway and node exec hosts, this requirement can be bypassed. As a result, unauthorized inline eval commands may be executed, potentially leading to security breaches and unauthorized access to sensitive data.
How To Fix
Latest published version: 2026.10.6 as of 22 Oct 2026
npm install openclaw@2026.10.6Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
2026.4.8
This is the first release that contains the fix.
npm install openclaw@2026.4.8Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is strongly recommended to update to the patched version as soon as possible to mitigate the risk.
Conclusion
In summary, the OpenClaw package has a significant vulnerability that allows inline eval commands to bypass the required approval mechanism. Users are urged to update to version 2026.4.8 to mitigate this risk. Regular monitoring and updates are essential to maintain security in open-source software.
See every vulnerability recorded for openclaw →
FAQ
The vulnerability allows inline eval commands to bypass the explicit approval requirement due to a fallback mechanism, potentially leading to unauthorized command execution.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The CVSS score of this vulnerability is 5.9, indicating a moderate level of risk.
While there are no specific workarounds, it is crucial to prioritize updating to the patched version to ensure your application remains secure.
The vulnerability was reported by @zsxsoft and @KeenSecurityLab, highlighting the importance of community vigilance in maintaining software security.
References
Related vulnerabilities
Recent vulnerabilities recorded for openclaw.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
