Openclaw cli: OpenClaw: Unrecognized script runners could bypass `system.run` approval integrity (CVE-2026-32978)

In openclaw-cli versions before 2026.3.11, the node-host system.run approval process failed to bind mutable file operands for some script runners such as tsx and jiti. This allowed an attacker to obtain approval for a benign script-runner command, then rewrite the referenced script on disk. Because the approval did not revalidate the modified script before execution, the altered code could run under the approved context, leading to unintended local code execution as the OpenClaw runtime user. The fix in version 2026.3.11 enforces a fail-closed approach requiring exactly one concrete local file operand to be bound for approval-backed interpreter commands and extends coverage to additional runtime forms.

Deployments relying on node-host system.run approvals for script integrity could be compromised by executing rewritten local code after operator approval. This results in unintended local code execution with the privileges of the OpenClaw runtime user, potentially leading to high confidentiality, integrity, and availability impacts.

Upgrade openclaw-cli to version 2026.3.11 or later, where the vulnerability is fixed by enforcing strict binding of local file operands for script runners and failing closed if this condition is not met. No other workarounds are indicated.