OpenClaw before version 2026.4.22 contains an exec allowlist analysis vulnerability that allows authenticated attackers to execute arbitrary shell commands via hidden expansion tokens.

This flaw involves an incomplete list of disallowed inputs, cataloged as CWE-184, where shell expansion tokens embedded within unquoted heredoc bodies bypass allowlist validation. The attack vector requires low privileges with network access and no user interaction.

A successful exploitation of this vulnerability can lead to total compromise of confidentiality, integrity, and availability within the affected environment. Given the high CVSS score of 8.8, attackers could gain unauthorized command execution capabilities, potentially leading to severe data breaches, system downtime, and long term reputational damage.

Immediate Action: Update the OpenClaw package to version 2026.4.22 or later to resolve the allowlist validation flaw.

Proactive Monitoring: Monitor process creation logs and command-line execution arguments for anomalous shell expansions or unapproved execution patterns.

Compensating Controls: Restrict user permissions and enforce strict network segmentation to limit the blast radius if command execution occurs.

Public Exploit Available: No

Security teams must treat CVE-2026-44115 with high urgency given its severe impact on system integrity. Administrators should apply the available package updates immediately to prevent unauthorized command execution and secure the execution environment against allowlist bypass techniques.