GHSA-6j27-pc5c-m8w8: OpenClaw's allow-always wrapper persistence could bypass future approvals and enable command execution

In openclaw npm releases up to and including 2026.2.21-2, approving wrapped system.run commands with allow-always in security=allowlist mode could persist wrapper-level allowlist entries and enable later approval-bypass execution of different inner payloads.