CVE-2026-32010
OpenClaw < 2026.2.22 - Allowlist Bypass via sort --compress-program Parameter
OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in the safe-bin configuration when sort is manually added to tools.exec.safeBins. Attackers can invoke sort with the --compress-program flag to execute arbitrary external programs without operator approval in allowlist mode with ask=on-miss enabled.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
OpenClaw < 2026.2.22 - Allowlist Bypass via sort --compress-program Parameter
OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in the safe-bin configuration when sort is manually added to tools.exec.safeBins. Attackers can invoke sort with the --compress-program flag to execute arbitrary external programs without operator approval in allowlist mode with ask=on-miss enabled.
- Record
CVE-2026-32010- CVSS 4.0
- 5.8 Medium
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N - CVSS 3.1
- 6.3 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H - Weakness
- CWE-78
- Updated
- 2026-11-02
EUVDEUVD-2026-13271
OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in the safe-bin configuration when sort is manually added to tools.exec.safeBins. Attackers can invoke sort with the --compress-program flag to execute arbitrary external programs without operator approval in allowlist mode with ask=on-miss enabled.
- Record
EUVD-2026-13271- CVSS 4.0
- 5.8 Medium
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-4gc7-qcvf-38wg
In OpenClaw, manually adding sort to tools.exec.safeBins could bypass allowlist approval via --compress-program
Summary
This issue applies to a non-default configuration only.
If sort is manually added to tools.exec.safeBins, OpenClaw could treat sort --compress-program=<prog> as valid safe-bin usage.
In security=allowlist + ask=on-miss, this could satisfy allowlist checks and skip operator approval, while GNU sort may invoke an external program via --compress-program.
Affected Packages / Versions
- Ecosystem: npm
- Package:
openclaw - Affected:
<= 2026.2.21-2 - Patched (planned next release):
>= 2026.2.22
Default Installations
Default installs are not impacted by this specific path because sort is not included in default tools.exec.safeBins.
Impact
- Type: approval/allowlist bypass in optional safe-bin configuration
- Scope: deployments that explicitly include
sortintools.exec.safeBinsand useallowlist + ask=on-miss - Consequence: an external program may run under the OpenClaw process context without expected approval
Technical Details
sortsafe-bin profile allowed--compress-programas a value flag.- Safe-bin satisfaction could therefore mark allowlist checks as satisfied.
- In
ask=on-miss, satisfied allowlist checks skip approval prompts.
Fix
- Block
--compress-programin safe-bin sort policy. - Add unit and e2e regression coverage for
sort --compress-programdenial in safe-bin mode.
Fix Commit(s)
57fbbaebca4d34d17549accf6092ae26eb7b605c
OpenClaw thanks @tdjackey for reporting.
- Record
GHSA-4gc7-qcvf-38wg- CVSS 4.0
- 5.8 Medium
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N - CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-78, CWE-184
- Updated
- 2026-11-02
NVD
OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in the safe-bin configuration when sort is manually added to tools.exec.safeBins. Attackers can invoke sort with the --compress-program flag to execute arbitrary external programs without operator approval in allowlist mode with ask=on-miss enabled.
- Record
CVE-2026-32010- CVSS 4.0
- 5.8 Medium
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 6.3 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H - CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-78
- Updated
- 2026-11-02
OSV
OpenClaw < 2026.2.22 - Allowlist Bypass via sort --compress-program Parameter
OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in the safe-bin configuration when sort is manually added to tools.exec.safeBins. Attackers can invoke sort with the --compress-program flag to execute arbitrary external programs without operator approval in allowlist mode with ask=on-miss enabled.
- Record
CVE-2026-32010- CVSS 4.0
- 5.8 Medium
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N - Weakness
- CWE-78
- Updated
- 2026-11-02
OSVGHSA-4gc7-qcvf-38wg
In OpenClaw, manually adding sort to tools.exec.safeBins could bypass allowlist approval via --compress-program
Summary
This issue applies to a non-default configuration only.
If sort is manually added to tools.exec.safeBins, OpenClaw could treat sort --compress-program=<prog> as valid safe-bin usage.
In security=allowlist + ask=on-miss, this could satisfy allowlist checks and skip operator approval, while GNU sort may invoke an external program via --compress-program.
Affected Packages / Versions
- Ecosystem: npm
- Package:
openclaw - Affected:
<= 2026.2.21-2 - Patched (planned next release):
>= 2026.2.22
Default Installations
Default installs are not impacted by this specific path because sort is not included in default tools.exec.safeBins.
Impact
- Type: approval/allowlist bypass in optional safe-bin configuration
- Scope: deployments that explicitly include
sortintools.exec.safeBinsand useallowlist + ask=on-miss - Consequence: an external program may run under the OpenClaw process context without expected approval
Technical Details
sortsafe-bin profile allowed--compress-programas a value flag.- Safe-bin satisfaction could therefore mark allowlist checks as satisfied.
- In
ask=on-miss, satisfied allowlist checks skip approval prompts.
Fix
- Block
--compress-programin safe-bin sort policy. - Add unit and e2e regression coverage for
sort --compress-programdenial in safe-bin mode.
Fix Commit(s)
57fbbaebca4d34d17549accf6092ae26eb7b605c
OpenClaw thanks @tdjackey for reporting.
- Record
GHSA-4gc7-qcvf-38wg- CVSS 4.0
- 5.8 Medium
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N - CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-184, CWE-78
- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-32010 is a medium vulnerability (CVSS 5.8) in Openclaw, published March 3, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.30%, the 23rd percentile. Fixed in openclaw 2026.2.22.
References
github.com/openclaw/openclaw/security/advisories/GHSA-4gc7-qcvf-38wg
vulncheck.com/advisories/openclaw-allowlist-bypass-via-sort-compress-program-parameter
nvd.nist.gov/vuln/detail/CVE-2026-32010