N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-3x3x-h76w-hp98

GHSA-3x3x-h76w-hp98: OpenClaw exec allowlist safeBins short-option bypass could permit arbitrary file write

Summary

OpenClaw exec allowlist/safeBins policy could be bypassed with attached short-option payloads (for example sort -o/tmp/poc), enabling file-write operations while still satisfying safeBins checks.

Affected Packages / Versions

Package: openclaw (npm)
Affected versions: <= 2026.2.17
Latest published vulnerable version: 2026.2.17
Patched in: 2026.2.19

Impact

When tools.exec.security=allowlist and tools.exec.safeBins included affected binaries, attached short-option payloads could bypass safeBins argument validation and permit file-write behavior that should have been denied.

Fix Commit(s)

cfe8457a0f4aae5324daec261d3b0aad1461a4bc
bafdbb6f112409a65decd3d4e7350fbd637c7754
fec48a5006eab37c6a5821726ccaeec886486b13

OpenClaw thanks @FailButWin and @Redgrave961 for reporting.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-3x3x-h76w-hp98

GHSA-3x3x-h76w-hp98:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	< 2026.2.19	2026.2.19

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability lies in the improper validation of command-line arguments for binaries defined in safeBins. The core of the issue was in the isSafeBinUsage function in src/infra/exec-approvals-allowlist.ts. The initial implementation failed to handle short options with attached values (e.g., -o/tmp/file), allowing a bypass of the security policy that was intended to restrict safe binaries to stdin/stdout operations only.

The first patch (cfe8457a0f4aae5324daec261d3b0aad1461a4bc) directly addresses this by adding a new function, hasBlockedSafeBinOption, and calling it from within isSafeBinUsage to explicitly check for dangerous flags like -o for sort.

A subsequent patch (bafdbb6f112409a65decd3d4e7350fbd637c7754) further refactors this by replacing the logic in isSafeBinUsage with a call to a new, more robust function validateSafeBinArgv. This new function uses a profile-based system to validate arguments and also removes a file-existence check that could be used as an oracle.

The primary vulnerable function is isSafeBinUsage as it contained the flawed logic. The other functions identified are part of the fix and show the evolution of the mitigation.

Vulnerable functions

isSafeBinUsage

src/infra/exec-approvals-allowlist.ts

The function `isSafeBinUsage` was responsible for checking if a command execution was safe according to the `safeBins` policy. It was vulnerable because it did not correctly parse command-line arguments that were attached to short options (e.g., `sort -ofile` instead of `sort -o file`). This allowed an attacker to bypass the check that was supposed to prevent file access, as the file path was treated as part of the option. This vulnerability enabled writing to arbitrary files using a supposedly safe binary. The patch fixes this by introducing `hasBlockedSafeBinOption` which explicitly checks for and blocks these dangerous options regardless of how they are formatted.

validateSafeBinArgv

src/infra/exec-approvals-allowlist.ts

This function was introduced in a later patch to provide a more robust and deterministic way of validating arguments for safe binaries, replacing the previous, more naive implementation in `isSafeBinUsage`. It uses a profile-based approach to define allowed and blocked flags for each binary, and it does not rely on checking for file existence on the host, which fixed a separate file-existence oracle vulnerability. While not vulnerable itself, its introduction replaced the vulnerable logic.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

N/A

-

Basic Information

Basic Information

Concerned about an active attack path?

GHSA-3x3x-h76w-hp98: OpenClaw exec allowlist safeBins short-option bypass could permit arbitrary file write

Summary

Affected Packages / Versions

Impact

Fix Commit(s)

GHSA-3x3x-h76w-hp98:

N/A

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

N/A

N/A

Basic Information

Basic Information

GHSA-3x3x-h76w-hp98: OpenClaw exec allowlist safeBins short-option bypass could permit arbitrary file write

Summary

Affected Packages / Versions

Impact

Fix Commit(s)

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI