PT-2026-26003 · Openclaw · Openclaw

Tdjackey · CVE-2026-22169 · Published 2026-02-21 · Updated 2026-03-19

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.2.22

Description OpenClaw contains an allowlist bypass issue in the safeBins configuration. This allows attackers to invoke external helpers through the compress-program option. Specifically, when sort is explicitly added to tools.exec.safeBins, remote attackers can bypass intended safe-bin approval constraints by leveraging the compress-program parameter to execute unauthorized external programs. The vulnerable component is the safeBins configuration and the vulnerable parameter is compress-program. The vulnerable function is not explicitly mentioned.

Recommendations Update OpenClaw to version 2026.2.22 or later.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-15

CWE-78

Related Identifiers

BDU:2026-05049

CVE-2026-22169

GHSA-VMQR-RC7X-3446

Affected Products

Openclaw

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/22xxx/CVE-2026-22169.json · Exploit
• https://github.com/openclaw/openclaw/security/advisories/GHSA-vmqr-rc7x-3446 · Vendor Advisory
• https://github.com/openclaw/openclaw/commit/57fbbaebca4d34d17549accf6092ae26eb7b605c · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-22169 · Security Note
• https://osv.dev/vulnerability/CVE-2026-22169 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-05049 · Security Note
• https://osv.dev/vulnerability/GHSA-vmqr-rc7x-3446 · Vendor Advisory
• https://github.com/openclaw/openclaw · Note
• https://twitter.com/VulmonFeeds/status/2034160647890473211 · Twitter Post
• https://vulncheck.com/advisories/openclaw-allowlist-bypass-via-sort-configuration-in-safebins · Note
• https://twitter.com/CVEnew/status/2034136435079495980 · Twitter Post
• https://twitter.com/CVEarity/status/2034543843522306102 · Twitter Post