CVE-2026-31992
OpenClaw versions prior to 2026.2.23 contain an allowlist bypass vulnerability in system.run guardrails that allows authenticated operators to execute unintended commands. When /usr/bin/env is allowlisted, attackers can use env -S to bypass policy analysis and execute shell wrapper payloads at runtime.
Fraqueza
OpenClaw versions prior to 2026.2.23 contain an allowlist bypass vulnerability in system.run guardrails that allows authenticated operators to execute unintended commands. When /usr/bin/env is allowlisted, attackers can use env -S to bypass policy analysis and execute shell wrapper payloads at runtime.
Produtos afetados
- openclaw openclaw
Referências
- https://github.com/openclaw/openclaw/commit/3f923e831364d83d0f23499ee49961de334cf58b
- https://github.com/openclaw/openclaw/commit/a1c4bf07c6baad3ef87a0e710fe9aef127b1f606
- https://github.com/openclaw/openclaw/security/advisories/GHSA-48wf-g7cp-gr3m
- https://www.vulncheck.com/advisories/openclaw-allowlist-exec-guard-bypass-via-env-s
Encontre a falha antes de um atacante.
Entre com o GitHub e rode sua primeira auditoria em menos de um minuto. O plano gratuito não exige cartão de crédito.