Openclaw cli: OpenClaw: Node-host approvals could show misleading shell payloads instead of the executed argv (CVE-2026-32971)

In affected versions of openclaw (<=2026.3.10), the node-host system.run approval mechanism normalizes executables by basename and extracts inner shell payload text for display, but the actual execution preserves the full wrapper argv. This causes the approval UI and storage to show command text that does not match the executed command, potentially misleading operators. An attacker able to place or select a local wrapper binary and induce a wrapper-shaped command could execute local code after operator approval. The fix in [email protected] binds approvals to the exact executed argv and retains extracted shell payload text only as secondary preview data.

This vulnerability impacts the integrity of command approvals in openclaw, allowing an attacker with local control to execute arbitrary code by exploiting the mismatch between displayed approval text and the actual executed command. This could lead to unauthorized code execution despite operator approval, posing a high risk to system security.

Upgrade openclaw to version 2026.3.11 or later, where approvals are bound to the exact executed argv, eliminating the misleading approval display. No other workarounds are indicated.