by Kastro
Paper/Archive/CVE-2026-28470

CVE-2026-28470

OpenClaw OpenClaw — OpenClaw < 2026.2.2 - Exec Allowlist Bypass via Command Substitution in Double Quotes

EPSS 0.6%CVSS 9.8
critical.is priorityof 100
39
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 46.1.461 × 209.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

OpenClaw versions prior to 2026.2.2 contain an exec approvals (must be enabled) allowlist bypass vulnerability that allows attackers to execute arbitrary commands by injecting command substitution syntax. Attackers can bypass the allowlist protection by embedding unescaped $() or backticks inside double-quoted strings to execute unauthorized commands.

Affected

ProductAffectedFixed inSource
OpenClaw< 2026.2.22026.2.2CNA

Scores by source

VulnCheck (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
VulnCheck (CNA)9.2CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

advisorygithub.com/openclaw/openclaw/security/advisories/GHSA-3hcm-ggvf-rch5patchgithub.com/openclaw/openclaw/commit/d1ecb46076145deb188abcba8f0699709ea17198writeupvulncheck.com/advisories/openclaw-exec-allowlist-bypass-via-command-substitution-in-double-quotes