PT-2026-26495 · Npm · Openclaw
Published
2026-03-09
·
Updated
2026-03-09
CVSS v3.1
5.0
Medium
| Vector | AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L |
OpenClaw's
system.run shell-wrapper detection did not recognize PowerShell -EncodedCommand forms as inline-command wrappers.In
allowlist mode, a caller with access to system.run could invoke pwsh or powershell using -EncodedCommand, -enc, or -e, and the request would fall back to plain argv analysis instead of the normal shell-wrapper approval path. This could allow a PowerShell inline payload to execute without the approval step that equivalent -Command invocations would require.Latest published npm version:
2026.3.2Fixed on
main on March 7, 2026 in 1d1757b16f48f1a93cd16ab0ad7e2c3c63ce727d by recognizing PowerShell encoded-command aliases during shell-wrapper parsing, so allowlist mode continues to require approval for those payloads. Normal approved PowerShell wrapper flows continue to work.Affected Packages / Versions
- Package:
openclaw(npm) - Affected versions:
<= 2026.3.2 - Patched version:
>= 2026.3.7
Fix Commit(s)
1d1757b16f48f1a93cd16ab0ad7e2c3c63ce727d
Release Process Note
npm
2026.3.7 was published on March 8, 2026. This advisory is fixed in the released package.Thanks @tdjackey for reporting.
Fix
Incomplete List of Disallowed Inputs
Incorrect Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Openclaw