Shell Approval Gating Bypass in OpenClaw by OpenClaw Technologies

CVE-2026-27183

What is CVE-2026-27183?

OpenClaw versions before 2026.3.7 are susceptible to a shell approval gating bypass vulnerability. This flaw occurs in the handling of the system.run dispatch-wrapper, enabling adversaries to circumvent the necessary shell wrapper approval protocols. The inconsistency between the approval classifier and the execution planner allows for a specific sequence of four transparent dispatch wrappers, particularly the repeated invocation of environment variables before executing /bin/sh -c. Such a misalignment leads to a bypass of security mechanisms designed to enforce allowlist restrictions, facilitating unauthorized command execution.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References