A critical authorization vulnerability in OpenClaw allows authenticated attackers to achieve arbitrary code execution by manipulating script files after obtaining system approval.

This is an incorrect authorization vulnerability (CWE-863) where script runners like tsx and jiti fail to bind mutable file operands during the approval process. The vulnerability requires the attacker to have low-level privileges to initiate the request, which is then manipulated to execute unauthorized code.

The ability to execute arbitrary code under an approved context poses a severe risk to organizational security, potentially leading to full system compromise, data exfiltration, or unauthorized administrative actions. With a CVSS score of 8.0, this vulnerability is categorized as High severity and requires immediate attention to prevent lateral movement or total loss of system integrity.

Immediate Action: Update the OpenClaw package to version 2026.3.11 or later to implement the fix for approval integrity binding.

Proactive Monitoring: Monitor system logs for unauthorized file modifications, specifically targeting scripts executed by tsx or jiti runners, and review approval audit trails for anomalies.

Compensating Controls: Restrict filesystem access permissions to prevent unauthorized users from modifying scripts that are eligible for system.run approval.

Public Exploit Available: No (exploit_available: unknown)

Given the potential for complete system compromise via unauthorized script execution, organizations should prioritize updating to version 2026.3.11 immediately. Ensure that all development and production environments running OpenClaw are patched to neutralize this authorization bypass, as the current flaw effectively invalidates existing security controls surrounding script execution.