An allowlist bypass vulnerability in OpenClaw allows authenticated attackers to execute unauthorized system commands, posing a significant risk to system integrity.

The vulnerability exists in the system.run execution analysis component, which fails to correctly unwrap environment and shell-dispatch wrapper chains. An authenticated attacker can leverage this failure to bypass security allowlists by routing malicious payloads through binaries like env or bash.

The ability for an attacker to execute unauthorized commands on the underlying host can lead to full system compromise, unauthorized data access, and lateral movement within the network. With a CVSS score of 7.1, this represents a high-severity flaw that requires immediate attention to prevent potential service disruption or data exfiltration.

Immediate Action: Update the OpenClaw package to version 2026.2.22 or later to apply the necessary security patches.

Proactive Monitoring: Review system logs for unusual process execution patterns, specifically monitoring for the invocation of shell wrappers like env, bash, or sh originating from the OpenClaw service.

Compensating Controls: Implement strict command-line argument filtering at the infrastructure level and ensure the application runs with the least privilege necessary to limit the potential impact of command execution.

Public Exploit Available: Unknown

Given the high CVSS severity and the nature of the flaw, organizations should prioritize updating their OpenClaw deployments immediately. While there is no current evidence of active exploitation, the bypass mechanism is straightforward to replicate once understood, making rapid patching the most effective strategy to mitigate the risk of unauthorized system access.