Openclaw cli: OpenClaw: OpenShell `mirror` mode can convert untrusted sandbox files into explicitly enabled workspace hooks and execute them on the host during gateway startup (CVE-2026-41355)

The openclaw-cli package's OpenShell 'mirror' mode has a vulnerability (CVE-2026-41355) where untrusted sandbox files can be converted into explicitly enabled workspace hooks and executed on the host during gateway startup. Exploitation requires the mirror mode to be active, hooks enabled, explicit hook opt-in, and a restart of the gateway. The vulnerability affects versions from 2026.1.29 up to but not including 2026.3.28. The issue was fixed in version 2026.3.28 with commit c02ee8a3a4cb390b23afdf21317aa8b2096854d1 on 2026-03-25.

Successful exploitation allows execution of untrusted code on the host system during gateway startup, potentially leading to full compromise of confidentiality, integrity, and availability. However, exploitation requires multiple conditions (mirror mode, hooks enabled, explicit hook opt-in, and restart), limiting the risk. The CVSS v3.1 score is 7.3 (high severity) with local attack vector, low complexity, low privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability.

A patch is available and should be applied by upgrading to openclaw-cli version 2026.3.28 or later. The fix is already released and included in version 2026.3.28. No additional mitigation is required if the updated version is deployed.