OpenClaw has a gateway exec allowlist allow-always bypass via unregistered /usr/bin/script wrapper

高 7.3CVE-2026-41390 · GHSA-6pfc-6m7w-m8fx · 28/04/2026 公開 · 17/06/2026 更新

要点

CVE-2026-41390 は openclaw (openclaw), openclaw に影響する深刻度「高」 (CVSS 7.3) の脆弱性です。
今後30日間に悪用される確率（EPSS）：0.12%（全脆弱性の 1.7% より高い）。
対処：2026.3.28 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
openclaw openclaw	`< 2026.3.28`	`2026.3.28`
openclaw npm	`< 2026.3.28`	`2026.3.28`

概要

Summary

Allow-always persistence did not unwrap /usr/bin/script and similar wrappers to the actual executed target before storing trust decisions.

Impact

A user approval for one wrapped command could persist trust for a wrapper binary that later executed a different underlying program.

Affected Component

src/infra/dispatch-wrapper-resolution.ts, src/infra/exec-wrapper-resolution.ts

Fixed Versions

Affected: <= 2026.3.24
Patched: >= 2026.3.28
Latest stable 2026.3.28 contains the fix.

Fix

Fixed by commit 83da3cfe31 (infra: unwrap script wrapper approval targets).

NVD の説明

OpenClaw before 2026.3.28 contains an exec allowlist bypass vulnerability where allow-always persistence fails to unwrap /usr/bin/script and similar wrappers before storing trust decisions. Attackers can obtain user approval for one wrapped command to persist trust for wrapper binaries that execute different underlying programs.