Executive brief
OpenClaw is a macOS automation and command execution tool used by system operators to manage local and remote execution tasks. The tool's command allowlist feature, which restricts which shell commands can be executed, can be bypassed by using combined POSIX inline-command flags, allowing attackers to run unauthorized shell commands if they have local access and operator interaction is involved.
Technical details
This is an allowlist bypass vulnerability (CWE-184) in OpenClaw's macOS Swift exec feature. The vulnerability arises from improper parsing of combined POSIX inline-command flags, which are not correctly validated against the command allowlist. An attacker with local privileges can craft a malicious command using combined flag forms to execute shell content that would normally be blocked. The attack requires local access and user interaction from an authenticated operator. The vulnerability is fixed in OpenClaw version 2026.5.6 and later; all versions up to 2026.5.5 are affected.
Affected products
- OpenClaw OpenClaw <=2026.5.5
Timeline
- 2026-05-28: disclosed
- 2026-05-28: patched: Patched in version 2026.5.6