PT-2026-26233 · Openclaw · Openclaw

Tdjackey · Published 2026-02-21 · Updated 2026-03-20 · CVE-2026-31993

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:H/Au:M/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.2.22

Description The OpenClaw macOS companion app contains a flaw in how it parses allowlists, potentially allowing authenticated operators to bypass execution approval checks. Specifically, attackers with operator.write privileges and a paired macOS beta node can create shell-chain payloads that circumvent incomplete allowlist validation, leading to arbitrary command execution on the paired host. This requires exec approvals to be set to security=allowlist and ask=on-miss. The issue stems from unsafe shell-substitution parsing in allowlist mode. The fix involves hardening macOS allowlist resolution by evaluating shell chains per segment and failing closed on unsafe parsing.

Recommendations OpenClaw versions prior to 2026.2.22 should be updated.

Fix

Improper Authorization

Incomplete List of Disallowed Inputs

Weakness Enumeration

CWE-285

CWE-184

Related Identifiers

BDU:2026-05009

CVE-2026-31993

GHSA-5326-6F73-M96W

GHSA-5F9P-F3W2-FWCH

Affected Products

Openclaw

References · 13

• https://github.com/openclaw/openclaw/commit/5da03e622119fa012285cdb590fcf4264c965cb5 · Patch
• https://github.com/openclaw/openclaw/security/advisories/GHSA-5f9p-f3w2-fwch · Vendor Advisory
• https://github.com/openclaw/openclaw/commit/e371da38aab99521c4e076cd3d95fd775e00b784 · Patch
• https://bdu.fstec.ru/vul/2026-05009 · Security Note
• https://osv.dev/vulnerability/CVE-2026-31993 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31993 · Security Note
• https://osv.dev/vulnerability/GHSA-5f9p-f3w2-fwch · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-5326-6f73-m96w · Vendor Advisory
• https://github.com/openclaw/openclaw · Note
• https://twitter.com/VulmonFeeds/status/2034495998186213437 · Twitter Post
• https://vulncheck.com/advisories/openclaw-allowlist-parsing-mismatch-in-system-run-shell-chains · Note
• https://twitter.com/CVEarity/status/2034879905348112640 · Twitter Post
• https://twitter.com/CVEnew/status/2034520391532589512 · Twitter Post