CVE-2026-28363: RCE in OpenClaw Node.js Tooling

The core of the vulnerability lies in the insufficient validation of command-line arguments within the tools.exec.safeBins module when operating in allowlist mode. OpenClaw intended to restrict execution to explicitly approved commands, but a flaw in how GNU long-option abbreviations (e.g., --compress-prog instead of --compress-program) were handled allowed attackers to bypass this restriction. By crafting malicious command-line arguments using these abbreviations, an attacker can execute arbitrary commands without triggering the intended approval process. This effectively grants them complete control over the affected system, enabling actions such as data theft, malware installation, and system compromise. The potential blast radius is significant, particularly in environments where OpenClaw is integrated into automated build or deployment pipelines.

1. Reserved2026-02-27
2. Published2026-02-27
3. Modified2026-03-16
4. EPSS updated2026-03-23

The primary mitigation for CVE-2026-28363 is to immediately upgrade OpenClaw to version 2026.2.23 or later. If upgrading is not immediately feasible due to compatibility concerns or breaking changes, consider implementing stricter input validation on command-line arguments passed to the tools.exec.safeBins module. Specifically, ensure that the full, unabbreviated command-line options are used and validated against the allowlist. As a temporary workaround, disabling the allowlist mode entirely might reduce the attack surface, but this is not a recommended long-term solution. Monitor system logs for unusual process executions or command-line patterns that might indicate exploitation attempts. After upgrading, confirm the fix by attempting to execute a command using a GNU long-option abbreviation and verifying that it is properly rejected.