GHSA-xgf2-vxv2-rrmg: OpenClaw's shell startup env injection bypasses system.run allowlist intent (RCE class)

March 3, 2026

system.run environment sanitization allowed shell-startup env overrides (HOME, ZDOTDIR) that can execute attacker-controlled startup files before allowlist-evaluated command bodies.

References

github.com/advisories/GHSA-xgf2-vxv2-rrmg
github.com/openclaw/openclaw
github.com/openclaw/openclaw/commit/c2c7114ed39a547ab6276e1e933029b9530ee906
github.com/openclaw/openclaw/security/advisories/GHSA-xgf2-vxv2-rrmg

Code Behaviors & Features

Detect and mitigate GHSA-xgf2-vxv2-rrmg with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →