Description
OpenClaw before 2026.3.8 contains an approval bypass vulnerability in system.run where mutable script operands are not bound across approval and execution phases. Attackers can obtain approval for script execution, modify the approved script file before execution, and execute different content while maintaining the same approved command shape.
Affected products
openclaw: openclaw
References4
- github.com/openclaw/openclaw/security/advisories/GHSA-8g75-q649… Vendor Advisory
- github.com/openclaw/openclaw/commit/c76d29208bf6a7f058d2cf58251… Patch
- github.com/openclaw/openclaw/commit/cf3a479bd1204f62eef7dd82b4a… Patch
- www.vulncheck.com/advisories/openclaw-script-content-modificati… Third Party Advisory
Metrics
- CVSS 3.1
-
5.0
MEDIUM
Score source: NVD
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L - CVSS 4.0
-
5.3
MEDIUM
Score source: CNA
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - EPSS — exploit probability
- 0% percentile: 10 · as of 12 November 2026
- CWE
- CWE-367
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.