Staging Environment: Content and features may be unstable or change without notice.
Advisory details: gitlab / npm/openclaw/GHSA-xrgv-34cc-q765
Advisory ID gitlab/npm/openclaw/GHSA-xrgv-34cc-q765
Aliases GHSA-xrgv-34cc-q765
Summary Duplicate Advisory: OpenClaw's system.run allowlist bypass via shell line-continuation command substitution ## Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-9868-vxmx-w862. This link is maintained to preserve external references. ## Original Description OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in system.run that allows attackers to execute non-allowlisted commands by splitting command substitution using shell line-continuation characters. Attackers can bypass security analysis by injecting $\\ followed by a newline and opening parenthesis inside double quotes, causing the shell to fold the line continuation into executable command substitution that circumvents approval boundaries.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (3)
CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
cvssv3.1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/openclaw/GHSA-xrgv-34cc-q765.yml
Reference id Reference type URL
3f0b9dbb36c86e308267924c0d3d4a4e1fc4d1e9 Other https://github.com/openclaw/openclaw/commit/3f0b9dbb36c86e308267924c0d3d4a4e1fc4d1e9
CVE-2026-28460 https://nvd.nist.gov/vuln/detail/CVE-2026-28460
GHSA-9868-vxmx-w862 Advisory https://github.com/openclaw/openclaw/security/advisories/GHSA-9868-vxmx-w862
GHSA-xrgv-34cc-q765 https://github.com/advisories/GHSA-xrgv-34cc-q765
openclaw-allowlist-bypass-via-shell-line-continuation-command-substitution-in-system-run Advisory https://www.vulncheck.com/advisories/openclaw-allowlist-bypass-via-shell-line-continuation-command-substitution-in-system-run
No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.
Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L Found at https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/openclaw/GHSA-xrgv-34cc-q765.yml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

There are no SSVC decisions available.