Executive brief
Openclaw is a gateway and execution platform used to manage and run commands. A security flaw in its shell wrapper feature allows commands to be modified after they have been approved but before they are actually executed. This could allow an attacker to bypass security allowlists and run unauthorized commands on the system, potentially leading to full system compromise depending on the configuration.
Technical details
A Time-of-Check Time-of-Use (TOCTOU) style vulnerability exists in Openclaw's shell wrapper implementation. When a command request uses a shell wrapper, the system may approve one set of resolved arguments (argv) but rebuild a different set for the actual execution phase. This allows an authenticated attacker with low privileges to bypass security policies, such as allowlists or manual approvals, by submitting a benign command that transforms into a malicious one during the execution rebuild. The vulnerability is tracked as CWE-284 (Improper Access Control) and is addressed in version 2026.5.18.
Affected products
- Openclaw Openclaw <= 2026.5.16
Timeline
- 2026-05-28: disclosed
- 2026-05-28: advisory: Initial advisory published
- 2026-07-02: other: Advisory updated and reviewed