OpenClaw Executable Rebind Vulnerability in System.run Approvals

A vulnerability exists in OpenClaw versions prior to 2026.3.1, where the application fails to properly bind executable identity for non-path-like argv[0] tokens in system.run approvals. This oversight allows post-approval executable rebind attacks, where an attacker can alter PATH resolution after an approval has been granted, executing a different binary than originally approved by the operator. This flaw enables arbitrary command execution.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of commands, using a different binary than the one the operator approved.

Remediation

Users can upgrade to OpenClaw version 2026.3.1 or later to address this vulnerability.