PT-2026-27222 · Openclaw · Openclaw

Tdjackey · Published 2026-03-09 · Updated 2026-03-24 · CVE-2026-27183

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.3.7

Description OpenClaw contains a flaw in its system.run dispatch-wrapper handling that allows attackers to bypass shell wrapper approval requirements. The issue arises because the approval classifier and execution planner use different depth-boundary rules. Specifically, using four transparent dispatch wrappers, such as repeated env invocations, before /bin/sh -c can bypass security=allowlist approval gating by misaligning classification with execution planning. The system.run function is involved in this issue.

Recommendations Update OpenClaw to version 2026.3.7 or later.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-436

CWE-863

Related Identifiers

CVE-2026-27183

GHSA-R6QF-8968-WJ9Q

Affected Products

Openclaw

References · 8

• https://github.com/openclaw/openclaw/commit/2fc95a7cfc1eb9306356510b0251b6d51fb1c0b0 · Patch
• https://github.com/openclaw/openclaw/security/advisories/GHSA-r6qf-8968-wj9q · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-r6qf-8968-wj9q · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-27183 · Security Note
• https://github.com/openclaw/openclaw · Note
• https://github.com/openclaw/openclaw/releases/tag/v2026.3.7 · Note
• https://vulncheck.com/advisories/openclaw-mar-shell-approval-gating-bypass-via-dispatch-wrapper-depth-mismatch · Note
• https://twitter.com/VulmonFeeds/status/2036321646018019715 · Twitter Post