GHSA-2fgq-7j6h-9rm4: OpenClaw has system.run shell-wrapper env injection via SHELLOPTS/PS4 can bypass allowlist intent (RCE)

March 3, 2026

system.run allowed SHELLOPTS + PS4 environment injection to trigger command substitution during bash -lc xtrace expansion before the allowlisted command body executed.

References

github.com/advisories/GHSA-2fgq-7j6h-9rm4
github.com/openclaw/openclaw
github.com/openclaw/openclaw/commit/e80c803fa887f9699ad87a9e906ab5c1ff85bd9a
github.com/openclaw/openclaw/security/advisories/GHSA-2fgq-7j6h-9rm4

Code Behaviors & Features

Detect and mitigate GHSA-2fgq-7j6h-9rm4 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →