GHSA-p4x4-2r7f-wjxg
OpenClaw gateway exec allow-always over-trusts positional carrier executables
Packages
Details
As written in the advisory (Markdown source, shown as plain text).
## Summary
Allow-always persistence could trust wrapper carrier executables instead of the actual invoked target when commands were routed through dispatch wrappers.
## Impact
A one-time approval could persist a broader future allowlist entry than the operator intended, weakening execution approval boundaries.
## Affected Component
`src/infra/exec-approvals-allowlist.ts`
## Fixed Versions
- Affected: `<= 2026.3.24`
- Patched: `>= 2026.3.28`
- Latest stable `2026.3.28` contains the fix.
## Fix
Fixed by commit `9ec44fad39` (`Exec approvals: reject wrapper carrier allow-always targets`).
References
External links from the advisory. They lead to third-party sites.