Executive brief
OpenClaw, a tool used for managing execution gateways and plugins, contains a security flaw in how it validates authorized commands. An attacker with low-level access can bypass security restrictions to execute unauthorized actions or commands by manipulating file paths. This could lead to a full system compromise, unauthorized data access, or service disruption depending on how the software is configured.
Technical details
An authorization bypass vulnerability exists in OpenClaw's 'exec' allowlist glob matching logic. The root cause is improper limitation of pathnames (CWE-22) and incorrect authorization (CWE-863), where the system fails to properly neutralize special elements in input paths used for glob pattern matching. A remote attacker with low privileges can craft malicious input paths to traverse the allowlist and execute unauthorized commands or persist actions. This vulnerability is exploitable when the affected execution feature is enabled and reachable by lower-trust callers. The issue is resolved in version 2026.5.18.
Affected products
- OpenClaw OpenClaw < 2026.5.18
Timeline
- 2026-06-30: advisory: GitHub Security Advisory published
- 2026-07-16: advisory: VulnCheck advisory published
- 2026-07-17: disclosed: NVD publication date