OpenClaw is vulnerable to validation bypass through GNU long-option abbreviations in allowlist mode

The core of the vulnerability lies in the insufficient validation of command-line arguments within the tools.exec.safeBins module when operating in allowlist mode. OpenClaw intended to restrict execution to explicitly approved commands, but a flaw in how GNU long-option abbreviations (e.g., --compress-prog instead of --compress-program) were handled allowed attackers to bypass this restriction. By crafting malicious command-line arguments using these abbreviations, an attacker can execute arbitrary commands without triggering the intended approval process. This effectively grants them complete control over the affected system, enabling actions such as data theft, malware installation, and system compromise. The potential blast radius is significant, particularly in environments where OpenClaw is integrated into automated build or deployment pipelines.

Development teams and DevOps engineers using OpenClaw in their Node.js projects are at significant risk. Specifically, projects that rely on OpenClaw for automated build processes, deployment pipelines, or any task involving command-line execution are particularly vulnerable. Shared hosting environments where multiple applications share the same Node.js runtime could also be affected if one application is vulnerable and can impact others.

• nodejs / supply-chain:

Get-Process | Where-Object {$_.ProcessName -like '*openclaw*'} | Select-Object Name, Id, CommandLine

• nodejs / supply-chain:

Get-ScheduledTask | Where-Object {$_.Actions.Path -like '*openclaw*'} | Select-Object TaskName, Actions

• generic web: Inspect Node.js application logs for unusual process executions or command-line arguments containing GNU long-option abbreviations within OpenClaw-related processes.

1. 2026-02-27Disclosure

   disclosure

2. 2026-02-27Patch

   patch

1. Reservado2026-02-27
2. Publicada2026-02-27
3. Modificada2026-03-16
4. EPSS atualizado2026-03-23

The primary mitigation for CVE-2026-28363 is to immediately upgrade OpenClaw to version 2026.2.23 or later. If upgrading is not immediately feasible due to compatibility concerns or breaking changes, consider implementing stricter input validation on command-line arguments passed to the tools.exec.safeBins module. Specifically, ensure that the full, unabbreviated command-line options are used and validated against the allowlist. As a temporary workaround, disabling the allowlist mode entirely might reduce the attack surface, but this is not a recommended long-term solution. Monitor system logs for unusual process executions or command-line patterns that might indicate exploitation attempts. After upgrading, confirm the fix by attempting to execute a command using a GNU long-option abbreviation and verifying that it is properly rejected.