GHSA-vmqr-rc7x-3446
OpenClaw's non-default safeBins sort configuration can bypass intended allowlist approval constraints
Packages
Details
As written in the advisory (Markdown source, shown as plain text).
When `sort` is explicitly added to `tools.exec.safeBins` (non-default), the `--compress-program` option can invoke an external helper and bypass the intended safe-bin approval constraints in allowlist mode.
## Affected Packages / Versions
- Package: `openclaw` (npm)
- Vulnerable versions: `<=2026.2.21-2`
- Latest published npm version checked during triage: `2026.2.21-2` (as of February 22, 2026)
- Patched in planned next release: `2026.2.22`
## Fix Commit(s)
- `57fbbaebca4d34d17549accf6092ae26eb7b605c`
## Release Process Note
`patched_versions` is pre-set to the planned next release (`>=2026.2.22`). Once that npm release is published, the advisory can be published directly.
OpenClaw thanks @tdjackey for reporting.
References
External links from the advisory. They lead to third-party sites.