Openclaw cli: OpenClaw's non-default safeBins sort configuration can bypass intended allowlist approval constraints (CVE-2026-22169)
Description
OpenClaw CLI versions up to 2026.2.21-2 have a vulnerability where adding 'sort' to the non-default safeBins configuration allows bypassing intended allowlist approval constraints via the --compress-program option. This can invoke an external helper, circumventing security controls. A patch is planned for version 2026.2.22.
CVSS v3.1
Score 6.4medium
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The OpenClaw CLI tool has a vulnerability (CVE-2026-22169) in its safeBins configuration. When 'sort' is explicitly added to tools.exec.safeBins, the --compress-program option can invoke an external helper, bypassing the intended safe-bin approval constraints in allowlist mode. This flaw affects versions up to and including 2026.2.21-2. The issue is fixed in the planned release 2026.2.22 with commit 57fbbaebca4d34d17549accf6092ae26eb7b605c.
Potential Impact
An attacker with appropriate privileges could bypass allowlist restrictions intended to limit execution of external helpers, potentially leading to unauthorized code execution with high confidentiality, integrity, and availability impact as indicated by the CVSS score of 6.4.
Mitigation Recommendations
A patch is available and planned for release in version 2026.2.22. Users should upgrade to this version once it is published to remediate the vulnerability.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- BREW-openclaw-cli-CVE-2026-22169
- Osv Schema Version
- 1.7.3
- Ecosystems
- ["Homebrew"]
- Cvss Version
- 3.1
Threat ID: 6ac245d312601ec6a3168009
Added to database: 10/04/2026, 12:25:55 UTC
Last enriched: 10/04/2026, 13:15:55 UTC
Last updated: 10/04/2026, 16:08:36 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.