https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 11:31:04 +0000 https://vulnerability.circl.lu/vuln/cve-2026-27566 <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in system.run exec analysis that fails to unwrap env and shell-dispatch wrapper chains. Attackers can route execution through wrapper binaries like env bash to smuggle payloads that satisfy allowlist entries while executing non-allowlisted commands.</p> <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in system.run exec analysis that fails to unwrap env and shell-dispatch wrapper chains. Attackers can route execution through wrapper binaries like env bash to smuggle payloads that satisfy allowlist entries while executing non-allowlisted commands.</p> https://vulnerability.circl.lu/vuln/cve-2026-27566 https://vulnerability.circl.lu/vuln/ghsa-jj82-76v6-933r <p><strong>Affected:</strong> npm: openclaw</p> <p>### Summary `system.run` exec allowlist analysis treated wrapper binaries as the effective executable and did not fully unwrap `env`/shell-dispatch wrappers.</p> <p>This allowed wrapper-smuggled payloads (for example `env bash -lc ...`) to satisfy an allowlist entry for the wrapper while executing non-allowlisted commands.</p> <p>### Impact On affected versions, an actor who can trigger `system.run` requests under an allowlist policy could bypass intended allowlist restrictions by routing execution through wrapper binaries.</p> <p>### Affected Packages / Versions - Package: `openclaw` (npm) - Affected: `&lt;= 2026.2.21-2` - Patched in next release: `2026.2.22` (pre-set below so publish can happen immediately after npm release)</p> <p>### Fix Commit(s) - `2b63592be57782c8946e521bc81286933f0f99c7`</p> <p>### Release Process Note `patched_versions` is pre-set to the planned next release (`&gt;= 2026.2.22`).</p> <p>After npm `2026.2.22` is published, this advisory can be published directly without further metadata edits.</p> <p>OpenClaw thanks @tdjackey for reporting.</p> <p><strong>Affected:</strong> npm: openclaw</p> <p>### Summary `system.run` exec allowlist analysis treated wrapper binaries as the effective executable and did not fully unwrap `env`/shell-dispatch wrappers.</p> <p>This allowed wrapper-smuggled payloads (for example `env bash -lc ...`) to satisfy an allowlist entry for the wrapper while executing non-allowlisted commands.</p> <p>### Impact On affected versions, an actor who can trigger `system.run` requests under an allowlist policy could bypass intended allowlist restrictions by routing execution through wrapper binaries.</p> <p>### Affected Packages / Versions - Package: `openclaw` (npm) - Affected: `&lt;= 2026.2.21-2` - Patched in next release: `2026.2.22` (pre-set below so publish can happen immediately after npm release)</p> <p>### Fix Commit(s) - `2b63592be57782c8946e521bc81286933f0f99c7`</p> <p>### Release Process Note `patched_versions` is pre-set to the planned next release (`&gt;= 2026.2.22`).</p> <p>After npm `2026.2.22` is published, this advisory can be published directly without further metadata edits.</p> <p>OpenClaw thanks @tdjackey for reporting.</p> https://vulnerability.circl.lu/vuln/ghsa-jj82-76v6-933r