GHSA-6j27-pc5c-m8w8

Source

https://github.com/advisories/GHSA-6j27-pc5c-m8w8

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/03/GHSA-6j27-pc5c-m8w8/GHSA-6j27-pc5c-m8w8.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-6j27-pc5c-m8w8

Aliases

CVE-2026-29607

Downstream

MINI-frhg-vwc7-87f6

Published

2026-03-02T22:20:22Z

Modified

2026-03-19T21:32:29.351830Z

Severity

6.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H CVSS Calculator

Summary

OpenClaw's allow-always wrapper persistence could bypass future approvals and enable command execution

Details

Summary

In openclaw npm releases up to and including 2026.2.21-2, approving wrapped system.run commands with allow-always in security=allowlist mode could persist wrapper-level allowlist entries and enable later approval-bypass execution of different inner payloads.

Affected Packages / Versions

Package: openclaw (npm)
Affected versions: <= 2026.2.21-2
Planned patched version: 2026.2.22

Details

allow-always persistence was based on wrapper-level resolution instead of stable inner executable intent. A benign approved wrapper invocation could therefore broaden future trust boundaries.

Affected paths included gateway and node-host execution approval persistence flows. The fix now persists inner executable paths for known dispatch-wrapper chains (env, nice, nohup, stdbuf, timeout) and fails closed when safe unwrapping cannot be derived.

Impact

Authorization boundary bypass in allowlist mode, potentially leading to approval-free command execution (RCE class) on subsequent wrapped invocations.

Mitigation

Upgrade to 2026.2.22 (planned next release) or run with stricter exec policy (ask=always / security=deny) until upgraded.

Fix Commit(s)

24c954d972400f508814532dea0e4dcb38418bb0

Release Process Note

patched_versions is pre-set to 2026.2.22 so this advisory is publish-ready; publish after the npm release is live.

OpenClaw thanks @tdjackey for reporting.

Database specific

{
    "github_reviewed_at": "2026-03-02T22:20:22Z",
    "github_reviewed": true,
    "cwe_ids": [
        "CWE-78",
        "CWE-863"
    ],
    "nvd_published_at": null,
    "severity": "MODERATE"
}

References

Affected packages

npm / openclaw

Package

Name: openclaw; View open source insights on deps.dev
Purl: pkg:npm/openclaw

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2026.2.22

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/03/GHSA-6j27-pc5c-m8w8/GHSA-6j27-pc5c-m8w8.json"