Openclaw cli: OpenClaw Node system.run approval context-binding weakness in approval-enabled host=node flows (CVE-2026-32058)

In OpenClaw CLI versions from 2026.1.29 up to but excluding 2026.2.26, system.run approvals in approval-enabled host=node workflows lacked strict, versioned execution-context binding. This allowed reuse of previously approved requests with modified environment inputs, weakening the integrity guardrail provided by exec approvals. The fix introduces a required versioned binding (systemRunBindingV1) that includes command argv, cwd, agent/session context, and environment hash, removing legacy non-versioned fallback matching and enforcing fail-closed behavior on mismatches. The patch also explicitly blocks certain environment variables and improves regression coverage.

The vulnerability impacts the integrity of execution approvals in specific OpenClaw CLI workflows that use system.run through host=node with exec approvals enabled. Exploitation could allow reuse of approved commands with altered environment inputs, potentially bypassing intended integrity controls. However, the impact is limited by the requirement of a specific approval mode and context, resulting in a low CVSS score (2.6) and medium severity classification.

A patch is available in OpenClaw CLI version 2026.2.26 that enforces strict, versioned execution-context binding for system.run approvals in host=node workflows. Users should upgrade to version 2026.2.26 or later to remediate this issue. No additional mitigation actions are required beyond applying the official fix.