CVE-2026-29608: OpenClaw's Node system.run approval hardening wrapper semantic drift can execute unintended local scripts
(updated )
In openclaw@2026.3.1, node system.run approval-path hardening rewrote wrapper command argv in a way that changed execution semantics. A command shown/approved as a shell payload (for example echo SAFE) could execute a different local script when wrapper argv were rewritten.
References
- github.com/advisories/GHSA-h3rm-6x7g-882f
- github.com/openclaw/openclaw
- github.com/openclaw/openclaw/commit/dded569626b0d8e7bdab10b5e7528b6caf73a0f1
- github.com/openclaw/openclaw/security/advisories/GHSA-h3rm-6x7g-882f
- nvd.nist.gov/vuln/detail/CVE-2026-29608
- www.vulncheck.com/advisories/openclaw-approval-integrity-bypass-via-system-run-argv-rewriting
Code Behaviors & Features
Detect and mitigate CVE-2026-29608 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →