OpenClaw Approval Bypass Vulnerability in system.run Allowing Executable Rebind

An approval bypass vulnerability has been identified in OpenClaw versions prior to 2026.3.1. This vulnerability exists in the system.run feature, where non-path-like argv[0] tokens do not properly bind executable identity. As a result, attackers can exploit this flaw by modifying PATH resolution after an action has been approved, allowing them to execute a different binary than what was originally authorized.

Impact

Exploitation of this vulnerability could lead to the execution of an unauthorized binary, bypassing the original approval process.

Remediation

Users can upgrade to OpenClaw version 2026.3.1 or later to address this vulnerability.