N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-4gc7-qcvf-38wg

GHSA-4gc7-qcvf-38wg: In OpenClaw, manually adding sort to tools.exec.safeBins could bypass allowlist approval via --compress-program

Summary

This issue applies to a non-default configuration only. If sort is manually added to tools.exec.safeBins, OpenClaw could treat sort --compress-program=<prog> as valid safe-bin usage. In security=allowlist + ask=on-miss, this could satisfy allowlist checks and skip operator approval, while GNU sort may invoke an external program via --compress-program.

Affected Packages / Versions

Ecosystem: npm
Package: openclaw
Affected: <= 2026.2.21-2
Patched (planned next release): >= 2026.2.22

Default Installations

Default installs are not impacted by this specific path because sort is not included in default tools.exec.safeBins.

Impact

Type: approval/allowlist bypass in optional safe-bin configuration
Scope: deployments that explicitly include sort in tools.exec.safeBins and use allowlist + ask=on-miss
Consequence: an external program may run under the OpenClaw process context without expected approval

Technical Details

sort safe-bin profile allowed --compress-program as a value flag.
Safe-bin satisfaction could therefore mark allowlist checks as satisfied.
In ask=on-miss, satisfied allowlist checks skip approval prompts.

Fix

Block --compress-program in safe-bin sort policy.
Add unit and e2e regression coverage for sort --compress-program denial in safe-bin mode.

Fix Commit(s)

57fbbaebca4d34d17549accf6092ae26eb7b605c

OpenClaw thanks @tdjackey for reporting.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-4gc7-qcvf-38wg

GHSA-4gc7-qcvf-38wg:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	<= 2026.2.21-2	2026.2.22

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability lies in a flawed configuration within the openclaw package that could lead to an approval bypass. Specifically, if the sort command is manually added to the tools.exec.safeBins configuration, a malicious user could leverage the --compress-program argument of sort to execute an arbitrary command.

The analysis of the provided patch commit 57fbbaebca4d34d17549accf6092ae26eb7b605c reveals the root cause of the vulnerability. The patch modifies the safe-bin policy for the sort command in src/infra/exec-safe-bin-policy.ts. Before the fix, the --compress-program flag was part of the valueFlags list, meaning it was considered safe. The patch moves this flag to the blockedFlags list.

The function validateSafeBinArgv, located in the same file, is responsible for checking a command's arguments against these policies. The associated test files confirm that validateSafeBinArgv is the function that directly consumes this flawed policy. When a command is checked, this function would be called, and prior to the patch, it would have incorrectly approved the malicious command. Therefore, validateSafeBinArgv is identified as the key vulnerable function, as it's the component that fails to prevent the unsafe operation due to the incorrect policy.

Vulnerable functions

validateSafeBinArgv

src/infra/exec-safe-bin-policy.ts

This function is responsible for validating the arguments of a command against a safe-bin profile. Before the patch, the profile for the `sort` command incorrectly allowed the `--compress-program` flag. An attacker could use this flag to execute an arbitrary program. The `validateSafeBinArgv` function would have incorrectly returned `true` when checking a `sort` command with this flag, leading to an approval bypass in deployments where `sort` was configured as a safe bin.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

N/A

-

Basic Information

Basic Information

Concerned about an active attack path?

GHSA-4gc7-qcvf-38wg: In OpenClaw, manually adding sort to tools.exec.safeBins could bypass allowlist approval via --compress-program

Summary

Affected Packages / Versions

Default Installations

Impact

Technical Details

Fix

Fix Commit(s)

GHSA-4gc7-qcvf-38wg:

N/A

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

N/A

N/A

Basic Information

Basic Information

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

GHSA-4gc7-qcvf-38wg: In OpenClaw, manually adding sort to tools.exec.safeBins could bypass allowlist approval via --compress-program

Summary

Affected Packages / Versions

Default Installations

Impact

Technical Details

Fix

Fix Commit(s)

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI