OpenClaw: strictInlineEval explicit-approval boundary bypassed by approval-timeout fallback on gateway and node exec hosts

HIGH 7.5CVE-2026-42423 · GHSA-q2gc-xjqw-qp89 · Published 28/04/2026 · updated 17/06/2026

In short

CVE-2026-42423 is a HIGH (CVSS 7.5) vulnerability affecting openclaw (openclaw), openclaw.
Chance of exploitation in the next 30 days (EPSS): 0.32%, higher than 24.5% of all vulnerabilities.
Fix: update to 2026.4.8 or later.

Package	Affected versions	Patched versions
openclaw openclaw	`< 2026.4.8`	`2026.4.8`
openclaw npm	`< 2026.4.8`	`2026.4.8`

Description

Impact

strictInlineEval explicit-approval boundary bypassed by approval-timeout fallback on gateway and node exec hosts.

The approval-timeout fallback could allow inline eval commands that strictInlineEval was meant to require explicit approval for.

OpenClaw is a user-controlled local assistant. This advisory is scoped to the OpenClaw trust model and does not assume a multi-tenant service boundary.

Affected Packages / Versions

Package: openclaw (npm)
Affected versions: <=2026.4.2
Patched versions: 2026.4.8

Fix

The issue was fixed on main and is available in the patched npm version listed above. The verified fixed tree is commit d7c3210cd6f5fdfdc1beff4c9541673e814354d5.

Verification

The fix was re-checked against main before publication, including targeted regression tests for the affected security boundary.

Credits

Thanks @zsxsoft and @KeenSecurityLab for reporting.

NVD description

OpenClaw before 2026.4.8 contains an approval-timeout fallback mechanism that bypasses strictInlineEval explicit-approval requirements on gateway and node exec hosts. Attackers can exploit this timeout fallback to execute inline eval commands that should require explicit user approval, circumventing the intended security boundary.

References

openclaw/openclaw security advisory · WEB
nvd.nist.gov/vuln/detail/CVE-2026-42423 · ADVISORY
openclaw/openclaw commit d7c3210 · WEB
openclaw/openclaw · PACKAGE
vulncheck.com/advisories/openclaw-strictinlineeval-approval-boundary-bypass-via-approval-timeout-fallback · WEB

More vulnerabilities in openclaw

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

openclaw

< 2026.4.8

2026.4.8

openclaw

npm

< 2026.4.8

2026.4.8

Description

Impact

strictInlineEval explicit-approval boundary bypassed by approval-timeout fallback on gateway and node exec hosts.

The approval-timeout fallback could allow inline eval commands that strictInlineEval was meant to require explicit approval for.

OpenClaw is a user-controlled local assistant. This advisory is scoped to the OpenClaw trust model and does not assume a multi-tenant service boundary.

Affected Packages / Versions

Package: openclaw (npm)
Affected versions: <=2026.4.2
Patched versions: 2026.4.8

Fix

The issue was fixed on main and is available in the patched npm version listed above. The verified fixed tree is commit d7c3210cd6f5fdfdc1beff4c9541673e814354d5.

Verification

The fix was re-checked against main before publication, including targeted regression tests for the affected security boundary.

Credits

Thanks @zsxsoft and @KeenSecurityLab for reporting.

NVD description

More vulnerabilities in openclaw

See all →