Executive brief
OpenClaw is a command and workflow automation platform used by operators to manage infrastructure and execute tasks. A vulnerability in its shell command parsing allows authenticated operators to bypass security allowlists and execute unapproved commands without the required approval prompts, potentially enabling unauthorized actions.
Technical details
OpenClaw before version 2026.5.12 contains an allowlist bypass vulnerability (CWE-862: Missing Authorization, CWE-184: Incomplete List of Disallowed Inputs) in its shell inline-command parsing logic. Authenticated operators can craft command requests using shell inline-command forms that route through a parser code path missing the expected allowlist decision check, enabling shell command execution without intended approval or allowlist validation. The vulnerability requires authentication and is network-reachable when the affected feature is enabled. A patch is available in version 2026.5.12; mitigation requires enforcing approval processes for shell inline-command forms until patching is completed.
Affected products
- OpenClaw OpenClaw <= 2026.5.10-beta.1
Timeline
- 2026-05-28: disclosed
- 2026-05-28: patched: Fixed in version 2026.5.12
- 2026-06-16: other: GHSA-v383-2wgg-v483 published as duplicate advisory
- 2026-06-18: other: GHSA-v383-2wgg-v483 withdrawn as duplicate of GHSA-f397-5vjw-v2c2