Openclaw cli: OpenClaw's tools.exec.safeBins generic fallback allowed interpreter-style inline payload execution in allowlist mode

OpenClaw CLI's tools.exec.safeBins feature used a permissive generic fallback profile for binaries without explicit safe-bin profiles. In allowlist mode, this allowed interpreter-style binaries (e.g., python3, node, ruby) to execute inline payloads via command-line flags like -c. This behavior requires that the operator explicitly add such binaries to safeBins, so the vulnerability affects only non-default or misconfigured deployments. The vulnerability is addressed by removing the generic fallback, requiring explicit safe-bin profiles, and adding configurable safeBinProfiles. The fix is planned for release in version 2026.2.22.

The vulnerability allows interpreter-style binaries in the safeBins list to execute inline payloads in allowlist mode, potentially enabling unintended command execution. However, exploitation requires explicit operator configuration to include such binaries, limiting the impact to misconfigured environments. There are no known exploits in the wild.

A patch is available in the planned next release version 2026.2.22 that removes the generic safe-bin fallback and requires explicit safe-bin profiles for binaries in safeBins. Operators should update to version 2026.2.22 or later once released. Until then, avoid adding interpreter-style binaries to safeBins without explicit safe-bin profiles.