GHSA-3hcm-ggvf-rch5HighCVSS 9.8

OpenClaw has an exec allowlist bypass via command substitution/backticks inside double quotes

Published
February 17, 2026
Last Modified
March 6, 2026

🔗 CVE IDs covered (1)

CVE-2026-28470 →

📋 Description

Summary

Exec approvals allowlist bypass via command substitution/backticks inside double quotes.

Affected Packages / Versions

  • Package: openclaw (npm)
  • Affected: <= 2026.2.1
  • Fixed: >= 2026.2.2

Impact

Only affects setups that explicitly enable the optional exec approvals allowlist feature. Default installs are unaffected.

Fix

Reject unescaped $() and backticks inside double quotes during allowlist analysis.

Fix Commit(s)

  • d1ecb46076145deb188abcba8f0699709ea17198

Thanks @simecek for reporting.

🎯 Affected products1

  • npm/openclaw:< 2026.2.2

🔗 References (6)