Openclaw cli: OpenClaw Vulnerable to Remote Code Execution via Node Invoke Approval Bypass in Gateway (CVE-2026-28466)

CVE-2026-28466 is a critical remote code execution vulnerability in OpenClaw CLI's gateway method node.invoke for the system.run command. The gateway forwarded user-controlled parameters to node hosts without sanitizing internal approval fields such as params.approved and params.approvalDecision. This allowed an authenticated gateway client with valid credentials (e.g., leaked or shared tokens) to bypass the node host's exec approval gating and execute arbitrary commands. The vulnerability affects versions >=2026.1.29 and <2026.2.14. The fix in version 2026.2.14 ensures the gateway strips untrusted approval control fields, re-attaches approval flags only when referencing valid approval requests bound to the requesting device, and forwards only an allowlisted set of parameters, preventing control-field smuggling.

An attacker who can authenticate to the gateway (for example, via leaked or shared gateway tokens or paired device tokens with operator.write permissions) can execute arbitrary commands on connected node hosts supporting system.run. This can result in full compromise of developer workstations, continuous integration runners, and servers running the node host, leading to complete loss of confidentiality, integrity, and availability.

A patch is available and should be applied by upgrading to OpenClaw CLI version 2026.2.14 or later. Additionally, restrict access to the gateway to trusted networks and users only, avoiding exposure to untrusted networks. If token or password exposure is suspected, rotate gateway credentials immediately. As an additional mitigation, disable remote command execution on nodes by blocking system.run commands at the gateway using gateway.nodes.denyCommands or by configuring node exec security to deny execution.