Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.1
CVE-2026-22175: OpenClaw Approval Bypass Using Shell Wrappers
CVE-2026-22175 · published 7 months ago
Summary
OpenClaw's approval system can be tricked into allowing unauthorized access. If an attacker uses a specific type of shell wrapper, they can bypass the approval process, even if they shouldn't be allowed. This issue has been fixed in version 2026.2.23 of OpenClaw. If you're using a version earlier than 2026.2.23, update to the latest version to ensure your system is secure.
What to do
- Update steipete openclaw to version 2026.2.23.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| npm | steipete | openclaw |
< 2026.2.23 Fix: upgrade to 2026.2.23
|
Original advisory text
OpenClaw versions prior to 2026.2.23 contain an exec approval bypass vulnerability in allowlist mode where allow-always grants could be circumvented through unrecognized multiplexer shell wrappers ...
OpenClaw versions prior to 2026.2.23 contain an exec approval bypass vulnerability in allowlist mode where allow-always grants could be circumvented through unrecognized multiplexer shell wrappers like busybox and toybox sh -c commands. Attackers can exploit this by invoking arbitrary payloads under the same multiplexer wrapper to satisfy stored allowlist rules, bypassing intended execution restrictions.
References
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Severity
7.1
High
Type
CWE-184Incomplete List of Disallowed Inputs
Timeline
Published18 Mar 2026
Updated4 Nov 2026
First seen18 Mar 2026
Track software like this
Free during beta