GHSA-5v6x-rfc3-7qfr: OpenClaw has Windows system.run approval mismatch on cmd.exe /c trailing arguments

A Windows system.run approval-integrity mismatch in the cmd.exe /c path could allow trailing arguments to execute while approval/audit text reflected only a benign command string.

This requires an authenticated operator context using the approvals flow and a trusted Windows node.