GHSA-f8r2-vg7x-gh8m

Suggest an improvement
Source
https://github.com/advisories/GHSA-f8r2-vg7x-gh8m
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/03/GHSA-f8r2-vg7x-gh8m/GHSA-f8r2-vg7x-gh8m.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-f8r2-vg7x-gh8m
Downstream
Published
2026-03-13T20:55:03Z
Modified
2026-03-13T21:04:26.079176Z
Severity
  • 6.9 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
OpenClaw: Exec approval allowlist patterns overmatched on POSIX paths
Details

Summary

matchesExecAllowlistPattern normalized patterns and targets with lowercasing and compiled glob matching too broadly on POSIX. In addition, the ? wildcard could match /, which allowed matches to cross path segments.

Impact

These matching rules could overmatch allowlist entries and permit commands or executable paths that an operator did not intend to approve.

Affected versions

openclaw <= 2026.3.8

Patch

Fixed in openclaw 2026.3.11 and included in later releases such as 2026.3.12. Exec allowlist matching now respects the intended path semantics, and regression tests cover the POSIX case-folding and slash-crossing cases.

Database specific 
{
    "github_reviewed_at": "2026-03-13T20:55:03Z",
    "nvd_published_at": null,
    "cwe_ids": [
        "CWE-178",
        "CWE-625"
    ],
    "severity": "MODERATE",
    "github_reviewed": true
}
References

Affected packages

npm / openclaw

Package

Name
openclaw
View open source insights on deps.dev
Purl
pkg:npm/openclaw

Affected ranges

Type
SEMVER
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2026.3.11

Database specific

last_known_affected_version_range 
"<= 2026.3.8"
source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/03/GHSA-f8r2-vg7x-gh8m/GHSA-f8r2-vg7x-gh8m.json"