PT-2026-26007 · Openclaw · Openclaw

Jisung · Published 2026-03-18 · Updated 2026-03-18 · CVE-2026-22175

Mitre

CVSS v3.1

7.1

7.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

OpenClaw versions prior to 2026.2.23 contain an exec approval bypass vulnerability in allowlist mode where allow-always grants could be circumvented through unrecognized multiplexer shell wrappers like busybox and toybox sh -c commands. Attackers can exploit this by invoking arbitrary payloads under the same multiplexer wrapper to satisfy stored allowlist rules, bypassing intended execution restrictions.

Fix

Incomplete List of Disallowed Inputs

Weakness Enumeration

CWE-184

Related Identifiers

CVE-2026-22175

Affected Products

Openclaw

References · 4

• https://github.com/openclaw/openclaw/commit/a67689a7e3ad494b6637c76235a664322d526f9e · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-22175 · Security Note
• https://github.com/openclaw/openclaw/security/advisories/GHSA-gwqp-86q6-w47g · Note
• https://vulncheck.com/advisories/openclaw-exec-approval-bypass-via-unrecognized-multiplexer-shell-wrappers · Note