Openclaw cli: OpenClaw has Windows system.run approval mismatch on cmd.exe /c trailing arguments (CVE-2026-22168)

The OpenClaw CLI has a Windows system.run approval-integrity mismatch vulnerability (CVE-2026-22168) where trailing arguments passed to 'cmd.exe /c' can execute while the approval and audit text only reflect a benign command string. This requires an authenticated operator and a trusted Windows node. The vulnerability allows local command execution under the node's process account and causes a mismatch between approved commands and executed commands. The fix involves canonicalizing the full command tail after 'cmd.exe /c' and unifying the command validation and approval process. The vulnerability affects versions <=2026.2.19-2, with a patch planned for 2026.2.21.

This vulnerability enables local command execution on the trusted Windows node process account, potentially allowing an attacker with authenticated operator privileges to execute unauthorized commands. It also undermines the integrity of the approval and audit process by allowing execution of commands not reflected in the approval text.

A patch is available and planned for release in OpenClaw version 2026.2.21. Users should update to this version once it is released to remediate the vulnerability. Until then, operators should be aware of the approval integrity mismatch and avoid using 'cmd.exe /c' with trailing arguments in approval workflows.