OpenClaw before version 2026.3.11 contains an exec allowlist bypass vulnerability. The flaw occurs because the exec allowlist pattern matching normalizes patterns with lowercasing and glob matching, which over‑matches on POSIX paths. An attacker can use the '?' wildcard across path segments to trigger execution of commands or paths that were not intended to be executable. This issue is classified as CWE‑625 and can compromise confidentiality, integrity, and availability by enabling arbitrary command execution.

The product affected is OpenClaw from the vendor OpenClaw. All releases prior to 2026.3.11 are vulnerable. Users should verify that their deployments are running a legacy version and plan an upgrade accordingly.

The CVSS score of 8.8 signals high severity; the EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is remote, inferred from the ability to trigger the exec allowlist via external input. Attackers who can supply such input could execute arbitrary commands without local privileges, making this a critical concern for systems that expose OpenClaw over a network.