Openclaw cli: OpenClaw has an exec allowlist bypass via command substitution/backticks inside double quotes (CVE-2026-28470)
Description
OpenClaw CLI versions up to 2026.2.1 have a critical vulnerability (CVE-2026-28470) that allows bypassing the exec approvals allowlist via command substitution or backticks inside double quotes. This issue only affects setups that explicitly enable the optional exec approvals allowlist feature; default installations are not impacted. The vulnerability is fixed in version 2026.2.2 and later by rejecting unescaped command substitutions and backticks during allowlist analysis.
CVSS v3.1
Score 9.8critical
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
OpenClaw CLI contains a vulnerability in its exec approvals allowlist feature where command substitution or backticks inside double quotes can bypass the allowlist restrictions. This allows execution of unauthorized commands despite the allowlist being enabled. The vulnerability affects versions up to 2026.2.1 and was fixed in 2026.2.2 by enhancing the allowlist analysis to reject unescaped $() and backticks inside double quotes.
Potential Impact
The vulnerability allows an attacker to bypass the exec approvals allowlist and execute arbitrary commands if the allowlist feature is enabled. Default installations without this feature enabled are not affected. The CVSS score of 9.8 indicates a critical impact with high confidentiality, integrity, and availability consequences.
Mitigation Recommendations
A fix is available in OpenClaw CLI version 2026.2.2 and later. Users should upgrade to at least this version to remediate the vulnerability. The fix rejects unescaped command substitutions and backticks inside double quotes during allowlist analysis. If the exec approvals allowlist feature is not enabled, no action is required.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- BREW-openclaw-cli-CVE-2026-28470
- Osv Schema Version
- 1.7.3
- Ecosystems
- ["Homebrew"]
- Cvss Version
- 3.1
Threat ID: 6ac245dd12601ec6a31684c6
Added to database: 10/04/2026, 12:26:05 UTC
Last enriched: 10/04/2026, 13:22:47 UTC
Last updated: 10/04/2026, 13:22:47 UTC
Views: 6
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.