GHSA-h3f9-mjwj-w476

Suggest an improvement
Source
https://github.com/advisories/GHSA-h3f9-mjwj-w476
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-h3f9-mjwj-w476/GHSA-h3f9-mjwj-w476.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-h3f9-mjwj-w476
Aliases
Published
2026-02-17T21:42:49Z
Modified
2026-02-20T16:57:58Z
Severity
  • 7.2 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
OpenClaw Node host system.run rawCommand/command mismatch can bypass allowlist/approvals
Details

Summary

A mismatch between rawCommand and command[] in the node host system.run handler could cause allowlist/approval evaluation to be performed on one command while executing a different argv.

Affected Configurations

This only impacts deployments that:

  • Use the node host / companion node execution path (system.run on a node).
  • Enable allowlist-based exec policy (security=allowlist) with approval prompting driven by allowlist misses (for example ask=on-miss).
  • Allow an attacker to invoke system.run.

Default/non-node configurations are not affected.

Impact

In affected configurations, an attacker who can invoke system.run can bypass allowlist enforcement and approval prompts by supplying an allowlisted rawCommand while providing a different command[] argv for execution.

Affected Packages / Versions

  • Package: openclaw (npm)
  • Affected versions: <= 2026.2.13
  • Patched version: >= 2026.2.14 (planned next release)

Fix

Enforce rawCommand/command[] consistency (gateway fail-fast + node host validation).

Fix Commit(s)

  • cb3290fca32593956638f161d9776266b90ab891

Release Process Note

This advisory pre-sets the patched version to the planned next release (2026.2.14). Once openclaw@2026.2.14 is published to npm, the advisory can be published without further edits.

Thanks @christos-eth for reporting.

Database specific 
{
    "cwe_ids":  [
        "CWE-284"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2026-02-17T21:42:49Z",
    "nvd_published_at":  "2026-02-19T23:16:25Z",
    "severity":  "HIGH"
}
References

Affected packages

npm / openclaw

Package

Name
openclaw
View open source insights on deps.dev
Purl
pkg:npm/openclaw

Affected ranges

Type
SEMVER
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2026.2.14

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-h3f9-mjwj-w476/GHSA-h3f9-mjwj-w476.json"