Weakened Exec Approval Binding in OpenClaw by OpenClaw

CVE-2026-43530

What is CVE-2026-43530?

OpenClaw versions 2026.2.23 to 2026.4.12 exhibit a vulnerability in the exec approval mechanism due to improper handling of busybox and toybox applet execution. This flaw enables attackers to disguise potentially malicious applets, allowing them to exploit opaque multi-call binaries and evade exec approval checks. Consequently, this could lead to a diminished risk assessment for unsafe applet executions, enhancing the potential for exploitation.

References