OpenClaw Command Injection Vulnerability in SafeBins Execution

A command injection vulnerability has been identified in OpenClaw versions prior to 2026.2.19. This vulnerability resides in the tools.exec.safeBins feature, allowing attackers to bypass restrictions that limit input to standard input only. By exploiting this flaw with certain output flags of the sort command or recursive flags of the grep command, attackers can manipulate file writes or reads, respectively. This circumvention of safe-bin execution restrictions could lead to unauthorized file access or modification.

Impact

Exploitation of this vulnerability allows for arbitrary file writes or reads, depending on the flags used, bypassing the intended safe-bin execution limitations.

Remediation

Users can upgrade to OpenClaw version 2026.2.19 or later to address this vulnerability.