Advisory details:
gitlab / npm/openclaw/GHSA-r6qf-8968-wj9q
| Advisory ID | gitlab/npm/openclaw/GHSA-r6qf-8968-wj9q |
| Aliases |
GHSA-r6qf-8968-wj9q
|
| Summary | OpenClaw: system.run wrapper-depth boundary could skip shell approval gating OpenClaw's `system.run` dispatch-wrapper handling applied different depth-boundary rules to shell-wrapper approval detection and execution planning. With exactly four transparent dispatch wrappers such as repeated `env` invocations before `/bin/sh -c`, the approval classifier could stop treating the command as a shell wrapper at the depth boundary while execution planning still unwrapped through to the shell payload. In `security=allowlist` mode, that mismatch could skip the expected approval-required path for the shell wrapper invocation. Latest published npm version: `2026.3.2` Fixed on `main` on March 7, 2026 in `2fc95a7cfc1eb9306356510b0251b6d51fb1c0b0` by keeping shell-wrapper classification active at the configured dispatch depth boundary and only failing closed beyond that boundary. This aligns approval gating with the execution plan. Legitimate shallow dispatch-wrapper usage continues to work. |
| Status | Published |
| Exploitability | 0.5 |
| Weighted Severity | 0.0 |
| Risk | |
| Affected and Fixed Packages | Package Details |
| Introduced and Fixed Package Commit Patches | Package Commit Patches Details |
| System | Score | Found at |
|---|---|---|
| cvssv3.1 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/openclaw/GHSA-r6qf-8968-wj9q.yml |
| Reference id | Reference type | URL |
|---|---|---|
| https://github.com/openclaw/openclaw | ||
| https://github.com/openclaw/openclaw/releases/tag/v2026.3.7 | ||
| 2fc95a7cfc1eb9306356510b0251b6d51fb1c0b0 | Other | https://github.com/openclaw/openclaw/commit/2fc95a7cfc1eb9306356510b0251b6d51fb1c0b0 |
| GHSA-r6qf-8968-wj9q | https://github.com/advisories/GHSA-r6qf-8968-wj9q | |
| GHSA-r6qf-8968-wj9q | Advisory | https://github.com/openclaw/openclaw/security/advisories/GHSA-r6qf-8968-wj9q |
No EPSS data available for this advisory.
| Patch URL | |
|---|---|
| There are no known patches. | |
| Attack Vector (AV) | Attack Complexity (AC) | Privileges Required (PR) | User Interaction (UI) | Scope (S) | Confidentiality Impact (C) | Integrity Impact (I) | Availability Impact (A) |
|---|---|---|---|---|---|---|---|
network adjacent_network local physical |
low high |
none low high |
none required |
unchanged changed |
high low none |
high low none |
high low none |
There are no SSVC decisions available.