https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-09T15:00:52.459286+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-26325 CVE-2026-26325 — OpenClaw Node host system.run rawCommand/command mismatch can bypass allowlist/approvals 2026-10-09T15:00:52.698587+00:00

Affected: openclaw

OpenClaw is a personal AI assistant. Prior to version 2026.2.14, a mismatch between `rawCommand` and `command[]` in the node host `system.run` handler could cause allowlist/approval evaluation to be performed on one command while executing a different argv. This only impacts deployments that use the node host / companion node execution path (`system.run` on a node), enable allowlist-based exec policy (`security=allowlist`) with approval prompting driven by allowlist misses (for example `ask=on-miss`), allow an attacker to invoke `system.run`. Default/non-node configurations are not affected. Version 2026.2.14 enforces `rawCommand`/`command[]` consistency (gateway fail-fast + node host validation).

 https://vulnerability.circl.lu/vuln/ghsa-h3f9-mjwj-w476 GHSA-h3f9-mjwj-w476 — OpenClaw Node host system.run rawCommand/command mismatch can bypass allowlist/approvals 2026-10-09T15:00:52.699173+00:00

Affected: npm: openclaw

## Summary

A mismatch between `rawCommand` and `command[]` in the node host `system.run` handler could cause allowlist/approval evaluation to be performed on one command while executing a different argv.

## Affected Configurations

This only impacts deployments that:

- Use the node host / companion node execution path (`system.run` on a node). - Enable allowlist-based exec policy (`security=allowlist`) with approval prompting driven by allowlist misses (for example `ask=on-miss`). - Allow an attacker to invoke `system.run`.

Default/non-node configurations are not affected.

## Impact

In affected configurations, an attacker who can invoke `system.run` can bypass allowlist enforcement and approval prompts by supplying an allowlisted `rawCommand` while providing a different `command[]` argv for execution.

## Affected Packages / Versions

- Package: `openclaw` (npm) - Affected versions: `<= 2026.2.13` - Patched version: `>= 2026.2.14` (planned next release)

## Fix

Enforce `rawCommand`/`command[]` consistency (gateway fail-fast + node host validation).

## Fix Commit(s)

- cb3290fca32593956638f161d9776266b90ab891

## Release Process Note

This advisory pre-sets the patched version to the planned next release (`2026.2.14`). Once `openclaw@2026.2.14` is published to npm, the advisory can be published without further edits.

Thanks @christos-eth for reporting.