OpenClaw versions prior to 2026.2.21 contain a stdin‑only policy bypass in the grep tool inside tools.exec.safeBins that lets attackers read arbitrary files. By supplying a pattern via the -e flag and a positional filename operand, the attacker bypasses file access restrictions and can read sensitive files, such as .env, from the working directory. This is a CWE‑184 vulnerability that can compromise confidentiality.

Affected systems include the OpenClaw product, all releases before 2026.2.21. The vulnerability is present in the grep binary packaged within the tools.exec.safeBins module. No other vendors or products are listed in the CNA data.

The CVSS score is 6.0, indicating a moderate severity. The EPSS score is < 1%, and the vulnerability is not listed in CISA’s KEV catalog, suggesting limited known exploitation. The attack vector is inferred to be local or application‑level, as the exploit requires the ability to invoke the grep tool with arbitrary flags. If an attacker can leverage the affected functionality, they can read any readable file, potentially leading to credential theft or other security breaches.