CVE-2026-32065 Details

A vulnerability exists in OpenClaw versions prior to 2026.2.25, allowing for an approval-integrity bypass in the system.run command execution. The issue arises because the rendered command text is used as the approval identity while trimming whitespace from the argv tokens. However, the actual execution uses the raw argv, enabling an attacker to craft a trailing-space executable token that executes a different binary than what was displayed during the approval process. This vulnerability can lead to unexpected command execution under the OpenClaw runtime user, particularly when the attacker can influence the command argv and reuse an approval context.

Users can update to OpenClaw version 2026.2.25 or later to address this vulnerability.