N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-3xfw-4pmr-4xc5

GHSA-3xfw-4pmr-4xc5: OpenClaw safeBins grep -e File Read Bypass (stdin-only policy bypass)

Summary

OpenClaw tools.exec.safeBins had a stdin-only policy bypass for grep. If pattern input was supplied through -e / --regexp, the validator consumed the pattern as a flag value and still allowed one positional operand. That positional could be a bare filename like .env.

Affected Packages / Versions

Package: openclaw (npm)
Latest published vulnerable version: 2026.2.19-2
Structured vulnerable range: <= 2026.2.19-2
Planned fixed range for next release: >= 2026.2.21

Exploit Preconditions

tools.exec.safeBins must include grep (this is opt-in; grep is not in the default safe-bin list).
An actor must be able to invoke exec tooling under that profile.

Technical Details

src/infra/exec-safe-bin-policy.ts configured grep with maxPositional: 1 and allowed -e / --regexp value flags. Because -e consumes the pattern in flag-value position, the remaining positional budget could be used for a file operand. Example accepted input in vulnerable builds:

grep -e SECRET .env

That violated the intended stdin-only guarantee for safe bins.

Impact

With grep opt-in enabled, callers could read bare-relative files from the working directory (for example .env, credentials.txt) in flows expected to be stdin-only.

Severity Rationale

CVSS v3.1 is set to: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N (5.3, Medium)

AC:H is used because exploitation depends on a non-default configuration (grep must be explicitly added to safe bins) in addition to normal low-privilege tool-invocation capability.

Fix Commit(s)

c6ee14d60e4cbd6a82f9b2d74ebeb1e8ee814964

Release Process Note

patched_versions is pre-set to >= 2026.2.21 so this advisory is ready to publish after the 2026.2.21 npm release is live.

OpenClaw thanks @athuljayaram for reporting.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-3xfw-4pmr-4xc5

GHSA-3xfw-4pmr-4xc5:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	< 2026.2.21	2026.2.21

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability exists in the argument validation logic for safeBins in OpenClaw, specifically for the grep command. The core of the issue lies in the validateSafeBinArgv function located in src/infra/exec-safe-bin-policy.ts. The security policy for grep was configured with maxPositional: 1, meaning it was allowed to have one positional argument. An attacker could exploit this by constructing a grep command that uses the -e flag to provide a search pattern. Since the pattern was provided via a flag, the single allowed positional argument slot remained available. An attacker could then use this slot to pass a filename (e.g., .env), causing grep to read from that file, thus bypassing the stdin-only guarantee of the safeBins feature. The patch addresses this by changing maxPositional for grep to 0, ensuring that validateSafeBinArgv rejects any grep command with positional arguments, thereby closing the file read bypass vulnerability.

Vulnerable functions

validateSafeBinArgv

src/infra/exec-safe-bin-policy.ts

The `validateSafeBinArgv` function was vulnerable because it used a policy for `grep` that allowed one positional argument (`maxPositional: 1`). When an attacker supplied a search pattern using the `-e` flag, the validation logic would consume the pattern as a flag argument but still permit a positional argument. This allowed the attacker to specify a filename as the positional argument, bypassing the intended stdin-only policy and enabling arbitrary file reads.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

N/A

-

Basic Information

Basic Information

Concerned about an active attack path?

GHSA-3xfw-4pmr-4xc5: OpenClaw safeBins grep -e File Read Bypass (stdin-only policy bypass)

Summary

Affected Packages / Versions

Exploit Preconditions

Technical Details

Impact

Severity Rationale

Fix Commit(s)

Release Process Note

GHSA-3xfw-4pmr-4xc5:

N/A

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

Technical Details

N/A

N/A

Basic Information

Basic Information

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

GHSA-3xfw-4pmr-4xc5: OpenClaw safeBins grep -e File Read Bypass (stdin-only policy bypass)

Summary

Affected Packages / Versions

Exploit Preconditions

Technical Details

Impact

Severity Rationale

Fix Commit(s)

Release Process Note

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI