Search: CVE-2026-53831

OpenClaw CLI on POSIX nodes has a vulnerability in its system.run safe-bin allowlist where shell expansion can widen the approved commands, allowing unintended file operands. This affects configurations using safe-bin or allowlist auto-approval with commands that include shell-expanded values. A lower-privilege operator could exploit this to read node-local files not intended by policy, potentially exposing sensitive configuration or local information. The issue is a policy enforcement gap in argument validation, not a general flaw in safe-bin commands. The vulnerability is patched in OpenClaw version 2026.5.18 and later.