CVE-2026-26325 PUBLISHED

OpenClaw Node host system.run rawCommand/command mismatch can bypass allowlist/approvals

Assigner: GitHub_M
Reserved: 13.02.2026 Published: 19.02.2026 Updated: 19.02.2026

OpenClaw is a personal AI assistant. Prior to version 2026.2.14, a mismatch between rawCommand and command[] in the node host system.run handler could cause allowlist/approval evaluation to be performed on one command while executing a different argv. This only impacts deployments that use the node host / companion node execution path (system.run on a node), enable allowlist-based exec policy (security=allowlist) with approval prompting driven by allowlist misses (for example ask=on-miss), allow an attacker to invoke system.run. Default/non-node configurations are not affected. Version 2026.2.14 enforces rawCommand/command[] consistency (gateway fail-fast + node host validation).

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS Score: 7.2

Product Status

Vendor openclaw
Product openclaw
Versions
  • Version < 2026.2.14 is affected

References

Problem Types

  • CWE-284: Improper Access Control CWE