OpenClaw Approval Bypass Vulnerability in Script Runners

A vulnerability in OpenClaw versions prior to 2026.3.11 allows for an approval bypass in the node-host 'system.run' command. The issue arises because certain script runners, such as 'tsx' and 'jiti', do not properly bind mutable file operands. This flaw enables attackers to gain approval for harmless script commands, modify the corresponding scripts on disk, and execute the altered code within the approved context.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of modified local scripts under the OpenClaw runtime user, potentially causing unintended consequences depending on the nature of the executed code.

Remediation

Users are advised to upgrade to OpenClaw version 2026.3.11 or later.