OpenClaw has an exec allowlist bypass via command substitution/backticks inside double quotes

Summary

Exec approvals allowlist bypass via command substitution/backticks inside double quotes.

Affected Packages / Versions

• Package: openclaw (npm)
• Affected: <= 2026.2.1
• Fixed: >= 2026.2.2

Impact

Only affects setups that explicitly enable the optional exec approvals allowlist feature. Default installs are unaffected.

Fix

Reject unescaped $() and backticks inside double quotes during allowlist analysis.

Fix Commit(s)

• d1ecb46076145deb188abcba8f0699709ea17198

Thanks @simecek for reporting.