An execution approval bypass vulnerability in OpenClaw versions prior to 2026.2.23 allows authenticated attackers to circumvent security controls and execute arbitrary payloads.

The application fails to properly validate inputs in allowlist mode, permitting attackers with low privileges to bypass intended execution restrictions by utilizing multiplexer shell wrappers such as busybox or toybox.

This vulnerability poses a significant risk to system integrity by allowing the bypass of established security policies. Successful exploitation enables an authenticated user to execute unauthorized commands or payloads, potentially leading to privilege escalation or further compromise of the host environment. Given the CVSS score of 7.1, this is considered a high severity risk that requires prompt attention to prevent unauthorized system modifications.

Immediate Action: Update the OpenClaw package to version 2026.2.23 or later to resolve the underlying input validation flaw.

Proactive Monitoring: Review system and application logs for suspicious shell command execution patterns, particularly those involving multiplexer utilities like busybox or toybox.

Compensating Controls: Implement strict environment variables and container execution policies to restrict the availability of unnecessary shell utilities that could be leveraged for wrapper bypasses.

Public Exploit Available: Unknown.

The vulnerability represents a high-risk security control failure that could be leveraged to bypass critical execution safeguards. Organizations currently running versions of OpenClaw prior to 2026.2.23 must prioritize the update process to ensure the integrity of their allowlist policies. Failure to patch may allow attackers to execute arbitrary code within the context of the application service.