8.8

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-3c6h-g97w-fg78

GHSA-3c6h-g97w-fg78: OpenClaw's tools.exec.safeBins sort long-option abbreviation bypass can skip exec approval in allowlist mode

Summary

In OpenClaw, tools.exec.safeBins validation for sort could be bypassed via GNU long-option abbreviations in allowlist mode, allowing approval-free execution paths that should require approval.

Affected Packages / Versions

Ecosystem: npm
Package: openclaw
Latest published version checked: 2026.2.22-2
Affected range: <= 2026.2.22-2
Fixed version: 2026.2.23

Impact

When all of the following are true:

tools.exec.security=allowlist
tools.exec.ask=on-miss
tools.exec.safeBins includes sort

abbreviated GNU long options (for example --compress-prog) could bypass denied-flag checks and be treated as allowlist-satisfied safe-bin usage, skipping approval.

Root Cause

Long-option handling matched denied flags by exact string and accepted unknown long options with inline values instead of failing closed.

Fix Commit(s)

3b8e33037ae2e12af7beb56fcf0346f1f8cbde6f

Release Process Note

patched_versions is pre-set to the released version (2026.2.23). This advisory now reflects released fix version 2026.2.23.

OpenClaw thanks @tdjackey for reporting.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-3c6h-g97w-fg78

GHSA-3c6h-g97w-fg78:

8.8

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	< 2026.2.23	2026.2.23

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability lies in the openclaw package's handling of command-line argument validation for 'safe binaries' like sort. The core of the issue is in the consumeLongOptionToken function within src/infra/exec-safe-bin-policy.ts. This function was responsible for checking if a given command-line option was in a list of denied flags. However, the check was a simple string comparison, which did not account for a feature of GNU command-line tools where long options can be abbreviated. For example, --compress-program could be abbreviated as --compress-prog. An attacker could use such an abbreviation to bypass the security check, as the abbreviated form was not explicitly in the denylist. This would allow them to execute the sort command with flags that could lead to arbitrary command execution or file system operations, which the safe-bin feature was designed to prevent. The patch addresses this by introducing logic to resolve any abbreviated long option to its canonical (full) form before checking it against the denylist. This ensures that both the full and abbreviated versions of a denied flag are correctly identified and blocked.

Vulnerable functions

consumeLongOptionToken

src/infra/exec-safe-bin-policy.ts

The function `consumeLongOptionToken` was vulnerable because it performed an exact match of command-line flags against a denylist. This allowed an attacker to bypass the check by providing an abbreviated version of a denied long option (e.g., `--compress-prog` instead of `--compress-program`). The abbreviated flag would not be found in the denylist, leading to the execution of a command with unauthorized options.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

8.8

-

Basic Information

Basic Information

Concerned about an active attack path?

GHSA-3c6h-g97w-fg78: OpenClaw's tools.exec.safeBins sort long-option abbreviation bypass can skip exec approval in allowlist mode

Summary

Affected Packages / Versions

Impact

Root Cause

Fix Commit(s)

Release Process Note

GHSA-3c6h-g97w-fg78:

8.8

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

GHSA-3c6h-g97w-fg78: OpenClaw's tools.exec.safeBins sort long-option abbreviation bypass can skip exec approval in allowlist mode

Summary

Affected Packages / Versions

Impact

Root Cause

Fix Commit(s)

Release Process Note

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

8.8

8.8

Technical Details

Basic Information

Basic Information

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI