Staging Environment: Content and features may be unstable or change without notice.
Advisory details: github_osv / GHSA-9868-vxmx-w862
Advisory ID github_osv/GHSA-9868-vxmx-w862
Aliases CVE-2026-28460
Summary OpenClaw's system.run allowlist bypass via shell line-continuation command substitution ### Summary In OpenClaw `system.run` allowlist mode, shell-wrapper analysis could be bypassed by splitting command substitution as `$\\` + newline + `(` inside double quotes. Analysis treated the payload as allowlisted (for example `/bin/echo`), while shell runtime folded the line continuation into `$(...)` and executed non-allowlisted subcommands. ### Affected Packages / Versions - Package: npm `openclaw` - Latest published affected version: `2026.2.21-2` - Affected range: `<=2026.2.21-2` - Patched version (planned next release): `2026.2.22` ### Impact In deployments that opt into `tools.exec.security=allowlist` (with `ask=on-miss` or `off`), this can bypass approval boundaries and lead to unintended command execution. ### Fix Commit(s) - `3f0b9dbb36c86e308267924c0d3d4a4e1fc4d1e9` ### Remediation - Upgrade to `2026.2.22` (or newer) when published. - Temporary mitigation: set `tools.exec.ask=always` or `tools.exec.security=deny`. ### Release Process Note `patched_versions` is pre-set to planned next release `2026.2.22`. After npm release is out, this advisory should be ready for direct publish without additional metadata edits. OpenClaw thanks @tdjackey for reporting.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (2)
CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-863 Incorrect Authorization
System Score Found at
generic_textual MODERATE
Reference id Reference type URL
https://github.com/openclaw/openclaw
3f0b9dbb36c86e308267924c0d3d4a4e1fc4d1e9 Other https://github.com/openclaw/openclaw/commit/3f0b9dbb36c86e308267924c0d3d4a4e1fc4d1e9
CVE-2026-28460 https://nvd.nist.gov/vuln/detail/CVE-2026-28460
GHSA-9868-vxmx-w862 Advisory https://github.com/openclaw/openclaw/security/advisories/GHSA-9868-vxmx-w862
openclaw-allowlist-bypass-via-shell-line-continuation-command-substitution-in-system-run Advisory https://www.vulncheck.com/advisories/openclaw-allowlist-bypass-via-shell-line-continuation-command-substitution-in-system-run
No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.
There are no known vectors.

Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-03-19T15:23:00Z/

Decision: Track

Source URL: https://github.com/cisagov/vulnrichment/blob/develop/2026/28xxx/CVE-2026-28460.json

Source Advisory: vulnrichment/CVE-2026-28460

View SSVC decision tree 
[{'Exploitation': 'none'},
 {'Automatable': 'no'},
 {'Technical Impact': 'partial'},
 {'Mission Prevalence': 'minimal'},
 {'Public Well-being Impact': 'material'},
 {'Mission & Well-being': 'medium'}]