PT-2026-25445 · Npm · Openclaw

Publicado

2026-03-03

·

Atualizado

2026-03-03

CVSS v4.0

2.3

Baixa

VetorAV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Summary

When tools.exec.safeBins contained a binary without an explicit safe-bin profile, OpenClaw used a permissive generic fallback profile. In allowlist mode, that could let interpreter-style binaries (for example python3, node, ruby) execute inline payloads via flags like -c.
This requires explicit operator configuration to add such binaries to safeBins, so impact is limited to non-default/misconfigured deployments.

Affected Packages / Versions

  • Package: openclaw (npm)
  • Affected versions: <= 2026.2.21-2
  • Patched in code: >= 2026.2.22 (planned next npm release)

Fix

  • Remove generic safe-bin fallback during allowlist evaluation.
  • Require explicit safe-bin profiles for safeBins entries.
  • Add configurable tools.exec.safeBinProfiles (global + per-agent) for safe custom binaries.
  • Update docs to clearly separate safeBins from command allowlist semantics.

Fix Commit(s)

  • 47c3f742b6c488be26dd7b9636dbbb8676089154

Release Process Note

patched versions is pre-set to the planned next release (>= 2026.2.22) so once that npm release is published, the advisory can be published directly without further metadata edits.
OpenClaw thanks @tdjackey for reporting.

Correção

OS Command Injection

Protection Mechanism Failure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-78CWE-693

Identificadores relacionados

GHSA-8MF7-VV8W-HJR2

Produtos afetados

Openclaw