OpenClaw versions prior to 2026.3.31 have a vulnerability where shell init-file options like --rcfile, --init-file, and --startup-file could bypass exec allowlist script matching. This allows an attacker to execute initialization scripts of their choosing under certain restricted conditions. The issue is limited to scenarios where exec allowlist or allow-always behavior is enabled and an attacker can control the shell-wrapper command shape. The vulnerability was fixed in OpenClaw 2026.3.31.