CVE-2026-22175: OpenClaw's exec allow-always can be bypassed via unrecognized multiplexer shell wrappers (busybox/toybox sh -c)

March 2, 2026 (updated March 18, 2026)

OpenClaw exec approvals could be bypassed in allowlist mode when allow-always was granted through unrecognized multiplexer shell wrappers (notably busybox sh -c and toybox sh -c).

References

github.com/advisories/GHSA-gwqp-86q6-w47g
github.com/openclaw/openclaw
github.com/openclaw/openclaw/commit/a67689a7e3ad494b6637c76235a664322d526f9e
github.com/openclaw/openclaw/security/advisories/GHSA-gwqp-86q6-w47g
nvd.nist.gov/vuln/detail/CVE-2026-22175

Code Behaviors & Features

Detect and mitigate CVE-2026-22175 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →