OpenClaw Exec Allowlist Bypass Vulnerability

A vulnerability allowing exec allowlist bypass has been identified in OpenClaw versions prior to 2026.3.11. The issue arises because the 'matchesExecAllowlistPattern' function improperly normalizes patterns, leading to an overbroad matching on POSIX paths. This flaw allows attackers to exploit the '?' wildcard to cross path segments, executing commands or accessing paths not intended to be approved by operators.

Impact

Exploitation of this vulnerability could allow unauthorized execution of commands or access to executable paths, bypassing the intended exec allowlist restrictions.

Remediation

Users can upgrade to OpenClaw version 2026.3.11 or later to address this vulnerability. The patch is included in version 2026.3.12.