Openclaw cli: OpenClaw's system.run shell-wrapper positional argv carriers could execute hidden commands under misleading approval text (CVE-2026-32052)

The OpenClaw CLI's system.run shell-wrapper command processing up to and including version 2026.2.23 allows hidden positional argv parameters to execute commands that are not reflected in the displayed approval or command text. This occurs because the inline shell payload text shown to the operator does not include trailing argv carriers that are executed at runtime, creating a mismatch between displayed and executed commands. The fix involves detecting such shell-wrapper forms, binding the approval text to the full argv vector, rejecting inconsistent rawCommand payloads, and validating command consistency on the macOS companion exec host. The vulnerability is patched starting from version 2026.2.24.

This vulnerability enables execution of hidden commands that are not visible in the approval or display context, potentially misleading operators into approving commands without full awareness of all executed arguments. This could lead to unauthorized or unintended command execution with limited user interface transparency.

A patch is available in OpenClaw CLI version 2026.2.24. Users should upgrade to version 2026.2.24 or later to remediate this issue. The fix ensures that the displayed approval text matches the full executed command including positional argv parameters, preventing hidden command execution under misleading text.