GHSA-8mf7-vv8w-hjr2 OpenClaw's tools.exec.safeBins generic fallback allowed interpreter-style inline payload execution in allowlist mode

Not scored Published 3 Mar 2026

OpenClaw's generic fallback allowed interpreter binaries to execute inline payloads in allowlist mode, enabling code execution in misconfigured deployments.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is GHSA-8mf7-vv8w-hjr2?

GHSA-8mf7-vv8w-hjr2 is a command injection vulnerability in openclaw, published on 3 Mar 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Summary

When tools.exec.safeBins contained a binary without an explicit safe-bin profile, OpenClaw used a permissive generic fallback profile. In allowlist mode, that could let interpreter-style binaries (for example python3, node, ruby) execute inline payloads via flags like -c.

This requires explicit operator configuration to add such binaries to safeBins, so impact is limited to non-default/misconfigured deployments.

Affected Packages / Versions

Package: openclaw (npm)
Affected versions: <= 2026.2.21-2
Patched in code: >= 2026.2.22 (planned next npm release)

Fix

Remove generic safe-bin fallback during allowlist evaluation.
Require explicit safe-bin profiles for safeBins entries.
Add configurable tools.exec.safeBinProfiles (global + per-agent) for safe custom binaries.
Update docs to clearly separate safeBins from command allowlist semantics.

Fix Commit(s)

47c3f742b6c488be26dd7b9636dbbb8676089154

Release Process Note

patched_versions is pre-set to the planned next release (>= 2026.2.22) so once that npm release is published, the advisory can be published directly without further metadata edits.

OpenClaw thanks @tdjackey for reporting.

Which versions are affected by GHSA-8mf7-vv8w-hjr2?

2 open source packages ship an affected version, including openclaw.

Package	Affected	Fixed in
`openclaw` npm	All versions	`2026.2.22`
`openclaw` npm	All versions	`2026.2.22`

How do I fix GHSA-8mf7-vv8w-hjr2?

Upgrade openclaw to 2026.2.22 or later.

Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.

Is GHSA-8mf7-vv8w-hjr2 being exploited?

There is no known exploitation of GHSA-8mf7-vv8w-hjr2 in the wild and no public exploit code.