CVE-2026-32921
OpenClaw's system.run approvals did not bind mutable script operands across approval and execution
描述
OpenClaw's `system.run` approval flow did not bind mutable interpreter-style script operands across approval and execution. A caller could obtain approval for an execution such as `sh ./script.sh`, rewrite the approved script before execution, and then execute different content under the previously approved command shape. The approved `argv` values remained the same, but the mutable script operand content could drift after approval. Latest published npm version verified vulnerable: `2026.3.7` The initial March 7, 2026 fix in `c76d29208bf6a7f058d2cf582519d28069e42240` added approval binding for shell scripts and a narrow interpreter set, but follow-up maintainer review on March 8, 2026 found that `bun` and `deno` script operands still did not produce `mutableFileOperand` snapshots. A complete fix shipped on March 9, 2026 in `cf3a479bd1204f62eef7dd82b4aa328749ae6c91`, which binds approved `bun` and `deno run` script operands to on-disk file snapshots and denies post-approval script drift before execution. ## Affected Packages / Versions - Package: `openclaw` (npm) - Affected versions: `<= 2026.3.7` - Patched version: `2026.3.8` ## Fix Commit(s) - `c76d29208bf6a7f058d2cf582519d28069e42240` - `cf3a479bd1204f62eef7dd82b4aa328749ae6c91` ## Release Verification - npm `2026.3.7` remains vulnerable. - npm `2026.3.8` contains the completed fix. Thanks @tdjackey for reporting.
如何修補 CVE-2026-32921
要修補 CVE-2026-32921,請將受影響套件升級到下列已修補版本。
- —升級至 2026.3.8 或更新版本
CVE-2026-32921 正在被利用嗎?
低 — EPSS 為 0.2%,目前沒有觀察到大規模利用活動。
受影響套件(1)
- from 0, < 2026.3.8