PT-2026-23541 · Openclaw · Openclaw

222N5 · Published 2026-03-02 · Updated 2026-03-09 · CVE-2026-28466

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.2.14

Description The gateway component fails to sanitize internal approval fields in node.invoke parameters, allowing authenticated clients to bypass exec approval gating for system.run commands. Attackers with valid gateway credentials can inject approval control fields to execute arbitrary commands on connected node hosts, potentially compromising developer workstations and CI runners. The gateway forwarded user-controlled params to node hosts without sanitizing internal approval fields. The node host treated params.approved === true and/or params.approvalDecision as sufficient to skip the approval workflow. The affected component is the gateway method node.invoke for the node command system.run.

Recommendations Upgrade to OpenClaw version 2026.2.14 or later. Restrict access to the gateway. Rotate gateway credentials if you suspect token exposure. Disable remote command execution on nodes by blocking system.run at the gateway and/or by configuring node exec security to deny.

Fix

RCE

Incorrect Authorization

Weakness Enumeration

CWE-441

CWE-863

CWE-20

Related Identifiers

CVE-2026-28466

GHSA-GV46-4XFQ-JV58

Affected Products

Openclaw

References · 16

• https://github.com/openclaw/openclaw/commit/318379cdb8d045da0009b0051bd0e712e5c65e2d · Patch
• https://github.com/openclaw/openclaw/commit/0af76f5f0e93540efbdf054895216c398692afcd · Patch
• https://github.com/openclaw/openclaw/commit/a7af646fdab124a7536998db6bd6ad567d2b06b0 · Patch
• https://github.com/openclaw/openclaw/commit/c1594627421f95b6bc4ad7c606657dc75b5ad0ce · Patch
• https://github.com/openclaw/openclaw/security/advisories/GHSA-gv46-4xfq-jv58 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-28466 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-28466 · Security Note
• https://osv.dev/vulnerability/GHSA-gv46-4xfq-jv58 · Vendor Advisory
• https://github.com/openclaw/openclaw · Note
• https://t.me/cveNotify/154817 · Telegram Post
• https://twitter.com/CVEnew/status/2030385181262053472 · Twitter Post
• https://twitter.com/TheHackerWire/status/2030252321054351712 · Twitter Post
• https://vulncheck.com/advisories/openclaw-remote-code-execution-via-node-invoke-approval-bypass · Note
• https://twitter.com/0dayPublishing/status/2031069736985878838 · Twitter Post
• https://twitter.com/RedPacketSec/status/2029725293494092264 · Twitter Post