Openclaw cli: OpenClaw: Linux and macOS exec allowlists skipped configured argument patterns (CVE-2026-53853)

OpenClaw's exec allowlist feature supports optional argPattern entries to restrict allowed arguments for an executable. In affected Linux and macOS versions, the argPattern checks were skipped, allowing any arguments for a matched executable path without triggering approval prompts when tools.exec.security is set to allowlist. This bypass affects only the direct enforcement of argPattern predicates and does not bypass all exec approval semantics. The vulnerability is present in versions >=2026.1.29 and <2026.5.12 and was fixed in 2026.5.12.

An attacker or lower-trust sender who can influence an agent using OpenClaw on Linux or macOS with exec allowlist mode enabled and argPattern restrictions configured may execute disallowed arguments for allowlisted executables. This could lead to unauthorized file access, network access, or command execution that should have required explicit approval. The severity depends on the specific allowlist configuration and exposure of the channel. High-risk executables include those with interpreter or subprocess capabilities like git, python, node, bash, find, tar, and ssh.

Upgrade OpenClaw CLI to version 2026.5.12 or later. Prior to upgrading, review exec allowlist entries that combine executable paths with argPattern restrictions, especially for interpreter-like or subprocess-capable tools, to understand potential exposure. This vulnerability is fixed in the stated version, so applying the official patch fully mitigates the issue.