CVE-2026-26325

HIGH7.2EPSS 0.03%

OpenClaw Node host system.run rawCommand/command mismatch can bypass allowlist/approvals

發布日:2026/2/17修改日:2026/2/20

描述

## Summary A mismatch between `rawCommand` and `command[]` in the node host `system.run` handler could cause allowlist/approval evaluation to be performed on one command while executing a different argv. ## Affected Configurations This only impacts deployments that: - Use the node host / companion node execution path (`system.run` on a node). - Enable allowlist-based exec policy (`security=allowlist`) with approval prompting driven by allowlist misses (for example `ask=on-miss`). - Allow an attacker to invoke `system.run`. Default/non-node configurations are not affected. ## Impact In affected configurations, an attacker who can invoke `system.run` can bypass allowlist enforcement and approval prompts by supplying an allowlisted `rawCommand` while providing a different `command[]` argv for execution. ## Affected Packages / Versions - Package: `openclaw` (npm) - Affected versions: `<= 2026.2.13` - Patched version: `>= 2026.2.14` (planned next release) ## Fix Enforce `rawCommand`/`command[]` consistency (gateway fail-fast + node host validation). ## Fix Commit(s) - cb3290fca32593956638f161d9776266b90ab891 ## Release Process Note This advisory pre-sets the patched version to the planned next release (`2026.2.14`). Once `[email protected]` is published to npm, the advisory can be published without further edits. Thanks @christos-eth for reporting.

受影響套件(1)

npm/openclawfrom 0, < 2026.2.14

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 3.1	HIGH7.2	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

描述

受影響套件(1)

CVSS 分數

參考連結(5)