Openclaw cli: OpenClaw: Shell init-file options could satisfy exec allowlist script matching (CVE-2026-41392)

OpenClaw CLI prior to version 2026.3.31 improperly handled exec allowlist matching by treating shell init-file wrapper invocations as if the approved script itself were executed. This flaw allowed shell options such as --rcfile, --init-file, and --startup-file to inherit allowlist trust, enabling an attacker to run initialization scripts of their choosing despite the presence of an exec allowlist. The vulnerability requires that exec allowlist or allow-always behavior is enabled and that the attacker can influence the shell-wrapper command shape. The issue was resolved by rejecting shell init-file script matches in commit 0c8375424620e12777ef24c162eedc7e9fcfd7e3, shipped in OpenClaw 2026.3.31.

The vulnerability enables a limited bypass of the exec allowlist feature, allowing attacker-controlled shell initialization scripts to run with allowlist trust. This does not result in generic arbitrary command execution from untrusted boundaries but can lead to execution of unauthorized initialization code under specific conditions. The impact includes potential compromise of confidentiality, integrity, and availability as indicated by the CVSS score.

A patch is available and was released in OpenClaw version 2026.3.31. Users should upgrade to version 2026.3.31 or later (e.g., 2026.4.1) to mitigate this vulnerability. No additional mitigation steps are required if the patch is applied.