OpenClaw versions prior to 2026.3.7 contain a shell approval gating bypass vulnerability in system.run dispatch-wrapper handling that allows attackers to skip shell wrapper appr...
Date: 2026-03
Affected: openclaw/openclaw
Attack vector: other
Category: vulnerability-disclosure
Severity: Critical
CVE: CVE-2026-27183
CVE-2026-27646
CVE-2026-32913
CWE: CWE-15
CWE-184
CWE-200
CWE-307
CWE-436
CWE-522
CWE-639
CWE-799
CWE-863
CVSS: 5.3 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)

OpenClaw versions prior to 2026.3.7 contain a shell approval gating bypass vulnerability in system.run dispatch-wrapper handling that allows attackers to skip shell wrapper approval requirements. The approval classifier and execution planner apply different depth-boundary rules, permitting exactly four transparent dispatch wrappers like repeated env invocations before /bin/sh -c to bypass security=allowlist approval gating by misaligning classification with execution planning.


Mitigations:

Architectural layers (MAESTRO):