GHSA-mhq8-78pj-5j79: OpenClaw's POSIX node system.run safe-bin allowlist could be widened by shell expansion

July 2, 2026 (updated August 25, 2026)

On POSIX nodes, OpenClaw’s system.run safe-bin checks could approve a command before shell expansion changed how the command was interpreted. A value that appeared to be a safe-bin argument could expand into additional shell words and become a file operand.

This issue is limited to paired POSIX node execution through system.run with safe-bin or allowlist-style auto-approval. It is not an unauthenticated node takeover.

References

github.com/advisories/GHSA-mhq8-78pj-5j79
github.com/openclaw/openclaw/security/advisories/GHSA-mhq8-78pj-5j79
nvd.nist.gov/vuln/detail/CVE-2026-53831
www.vulncheck.com/advisories/openclaw-arbitrary-file-read-via-shell-expansion-in-system-run-safe-bin-allowlist

Code Behaviors & Features

Detect and mitigate GHSA-mhq8-78pj-5j79 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →