| Package | Affected versions | Patched versions |
|---|---|---|
| openclaw | < 2026.3.28 | 2026.3.28 |
| openclaw | < 2026.3.28 | 2026.3.28 |
Allow-always persistence could trust wrapper carrier executables instead of the actual invoked target when commands were routed through dispatch wrappers.
A one-time approval could persist a broader future allowlist entry than the operator intended, weakening execution approval boundaries.
src/infra/exec-approvals-allowlist.ts
<= 2026.3.24>= 2026.3.282026.3.28 contains the fix.Fixed by commit 9ec44fad39 (Exec approvals: reject wrapper carrier allow-always targets).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free