Openclaw cli: OpenClaw: safeBins static default trusted dirs allow writable-dir binary hijack (`jq`) (CVE-2026-32009)

OpenClaw CLI versions <= 2026.2.23 rely on a safe-bin allowlist that trusts static default directories including package-manager and user-managed paths such as /opt/homebrew/bin and /usr/local/bin. Because trust decisions are based solely on directory membership, an attacker who can write a same-named binary (e.g., jq) into these directories can bypass the safeBins policy and achieve command execution in the OpenClaw runtime. The vulnerability is addressed in version 2026.2.24 by limiting default trusted directories to immutable system paths (/bin, /usr/bin) and requiring explicit operator opt-in for other paths via configuration.

This vulnerability allows an attacker with write access to certain trusted directories to execute arbitrary commands within the OpenClaw runtime context by hijacking binaries. The impact is limited by the prerequisite that the attacker must have the ability to write to these trusted directories. The CVSS score is 5.7 (medium severity) reflecting the required privileges and potential for command execution.

A patch is available in OpenClaw version 2026.2.24 which restricts default safe-bin trusted directories to immutable system paths and requires explicit opt-in for package-manager or user-managed paths. Users should upgrade to version 2026.2.24 or later to remediate this vulnerability. No additional mitigation is required once patched.