GHSA-gwqp-86q6-w47g: OpenClaw's exec allow-always can be bypassed via unrecognized multiplexer shell wrappers (busybox/toybox sh -c)

March 2, 2026

OpenClaw exec approvals could be bypassed in allowlist mode when allow-always was granted through unrecognized multiplexer shell wrappers (notably busybox sh -c and toybox sh -c).

References

github.com/advisories/GHSA-gwqp-86q6-w47g
github.com/openclaw/openclaw
github.com/openclaw/openclaw/commit/a67689a7e3ad494b6637c76235a664322d526f9e
github.com/openclaw/openclaw/security/advisories/GHSA-gwqp-86q6-w47g

Code Behaviors & Features

Detect and mitigate GHSA-gwqp-86q6-w47g with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →