Protection Mechanism Failure in OpenClaw - #VU132740

Detailed vulnerability description

The vulnerability allows a remote user to bypass configured argument restrictions and execute disallowed arguments for an allowlisted executable.

The vulnerability exists due to protection mechanism failure in exec allowlist enforcement when processing exec requests on Linux or macOS gateways with allowlist mode enabled. A remote user can influence a tool-enabled agent to invoke an allowlisted executable with arguments that should have been blocked to bypass configured argument restrictions and execute disallowed arguments for an allowlisted executable.

This issue affects only deployments using tools.exec.security: "allowlist" where at least one allowlist entry uses argPattern; Windows is not affected, and path-only allowlist entries are not additionally affected.

Remediation

Sources

• https://github.com/openclaw/openclaw/security/advisories/GHSA-v2ww-5rh7-2h5v