Openclaw cli: In OpenClaw, manually adding sort to tools.exec.safeBins could bypass allowlist approval via --compress-program (CVE-2026-32010)

OpenClaw CLI versions up to 2026.2.21-2 have a vulnerability when 'sort' is manually added to the 'tools.exec.safeBins' allowlist. The safe-bin profile for 'sort' permits the '--compress-program' flag, which can invoke an external program. In configurations using 'security=allowlist' with 'ask=on-miss', this flag can satisfy allowlist checks and bypass operator approval, allowing external code execution under the OpenClaw process context. The issue does not affect default installations as 'sort' is not included by default. The fix involves blocking the '--compress-program' flag in the safe-bin policy for 'sort' and adding regression tests. The patch is planned for release in version 2026.2.22.

The vulnerability allows an attacker to bypass allowlist approval prompts in OpenClaw CLI deployments that explicitly include 'sort' in the safe-bin allowlist and use 'ask=on-miss'. This can lead to execution of external programs under the OpenClaw process context without expected operator approval, potentially compromising confidentiality, integrity, and availability of the system.

A patch is available in OpenClaw CLI version 2026.2.22 and later that blocks the '--compress-program' flag in the safe-bin policy for 'sort'. Users should upgrade to version 2026.2.22 or later to remediate this issue. Default installations are not affected, so no action is required unless 'sort' has been manually added to the safe-bin allowlist.