CyberRota Analysis
AI-GeneratedVersions of the OpenClaw npm package from 2026.3.22 to 2026.8.1 are vulnerable to an approval-bypass flaw that allows an attacker to execute arbitrary commands with host privileges after a benign command wrapper has been approved. This vulnerability can be exploited if the wrapper is already trusted by an operator, potentially leading to unauthorized command execution without further approval. Organizations using affected versions should prioritize patching to version 2026.8.1 to mitigate this high-severity risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
OpenClaw (npm package 'openclaw') versions >= 2026.3.22 and < 2026.8.1 contain an approval-bypass flaw in the exec approval policy: the policy could trust a command-running wrapper without inspecting the command carried in its arguments. After an operator allowlisted or permanently approved a benign wrapper invocation, a later agent turn could substitute an arbitrary inner command and execute it with the OpenClaw process's host privileges without a further approval prompt. Exploitation requires the relevant wrapper to resolve on the host and a prior operator decision allowing that wrapper. Transparent shell carriers and opaque utilities such as process monitors, tracers, namespace tools, and proxy wrappers were affected through related trust-resolution gaps. Fixed in 2026.8.1.