Openclaw cli: OpenClaw: macOS optional allowlist basename matching could bypass path-based policy (CVE-2026-32016)

On macOS node-hosts, OpenClaw's optional exec-approval allowlist mode previously allowed basename-only entries (e.g., 'echo') to be trusted command matches. This permitted execution of a local binary with the same basename (e.g., './echo') without explicit approval when using 'security=allowlist' with 'ask=on-miss'. The default security setting 'security=deny' is not impacted. The vulnerability affects OpenClaw CLI versions up to and including 2026.2.21-2. The fix removes basename fallback, enforces path-only allowlist matching, migrates legacy basename entries to resolved paths, and rejects non-path allowlist patterns in UI/store validation. The patch is planned for release in version 2026.2.22.

An attacker with the ability to place a local binary with the same basename as an allowed command could bypass the path-based policy and execute unauthorized commands without approval. This could lead to high confidentiality, integrity, and availability impacts on affected macOS node-hosts running OpenClaw CLI with the vulnerable allowlist configuration.

A patch is available and planned for OpenClaw CLI version 2026.2.22 that enforces path-only allowlist matching and removes basename fallback. Users should upgrade to version 2026.2.22 or later once released. The default security posture 'security=deny' is not affected, so users not using 'security=allowlist' mode are not impacted. No additional mitigation is required beyond applying the official fix when available.