Executive brief
OpenClaw is a toolkit for execution control and policy management. An information disclosure vulnerability in its safeBins feature allows attackers to probe whether specific files exist on the host filesystem by observing differences in command approval/denial behavior, potentially revealing the presence of sensitive configuration or secret files and aiding in follow-on attacks.
Technical details
The vulnerability is an information disclosure (CWE-203: Observable Discrepancy) in OpenClaw's tools.exec.safeBins approval flow. The safe-bin validation logic performed host filesystem existence checks when evaluating candidate file paths, causing command allow/deny behavior to differ based on whether a path already existed on the system. An authenticated attacker with access to the execution surface could probe for file presence by submitting commands with different filenames and comparing outcomes, enabling filesystem enumeration. The fix changes safe-bin policy to deterministic argv-only validation without host file-existence checks, blocks file-oriented flags (e.g., sort -o, jq -f, grep -f), and maintains trusted-path enforcement.
Affected products
- OpenClaw openclaw <= 2026.2.17
Timeline
- 2026-02-19: disclosed
- 2026-02-18: patched: Version 2026.2.18 and later