CVE-2026-35666

OpenClaw < 2026.3.22 - Allowlist Bypass via Unregistered Time Dispatch Wrapper

Published Apr 10, 2026 CVSS 4.0 · 7.7 High EPSS < 1% KEV · Not listed

Description

OpenClaw before 2026.3.22 contains an allowlist bypass vulnerability in system.run approvals that fails to unwrap /usr/bin/time wrappers. Attackers can bypass executable binding restrictions by using an unregistered time wrapper to reuse approval state for inner commands.

Analysis

Technical impact

OpenClaw versions prior to 2026.3.22 contain an allowlist bypass in system.run approvals that fails to unwrap /usr/bin/time wrappers. The flaw, a manifestation of CWE-706 (Incorrect Authorization), permits attackers to circumvent executable binding restrictions and execute arbitrary commands by reusing approval state through an unregistered time wrapper.

Affected Systems

All versions of the OpenClaw application prior to 2026.3.22 are vulnerable. Affected systems include deployments of OpenClaw running on any platform supported by the open-source project, as discerned from the cpe entry cpe:2.3:a:openclaw:openclaw. All users of these versions should verify whether they use the system.run feature with /usr/bin/time wrappers.

Risk and Exploitability

The CVSS score of 7.7 reflects a high severity impact. EPSS data is not available, and the vulnerability is not listed in the CISA KEV catalog, but the flaw can still be leveraged by an attacker with the ability to invoke system.run. The likely attack vector involves users with local execution privileges providing a specially crafted path that includes the time wrapper, allowing the attacker to execute inner commands with elevated rights. Exploitation requires no additional software and can occur once the vulnerable binary is in the system’s PATH.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

OpenClaw

unaffected

Version	Status	Constraints
`0`	affected	< 2026.3.22
`2026.3.22`	unaffected	—

Configuration 1 [-]

cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*

No data.

Vendor Product Versions

Openclaw

Version	Status	Scheme	Platform
`[0,2026.3.22)`	affected	semver	—
`2026.3.22`	unaffected	semver	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Update OpenClaw to version 2026.3.22 or later
Verify that your deployment is running a patched version
Limit the use of /usr/bin/time wrappers with system.run until a patch is applied
Enable logging and audit of system.run invocations to detect abnormal wrapper usage

Generated by OpenCVE AI on April 10, 2026 at 17:37 UTC.

Tracking

Advisories

Source	ID	Title
Github GHSA	GHSA-qm9x-v7cx-7rq4	OpenClaw's system.run allowlist can be bypassed through an unregistered time dispatch wrapper

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Attack Requirements Present

User Interaction None

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact High

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.389% probability within 30 days)

Exploitation none

Automatable no

Technical Impact total

References

Link	Providers
https://github.com/openclaw/openclaw/commit/39409b6a6dd4239deea682e626bac9ba547bfb14
https://github.com/openclaw/openclaw/commit/630f1479c44f78484dfa21bb407cbe6f171dac87
https://github.com/openclaw/openclaw/security/advisories/GHSA-qm9x-v7cx-7rq4
https://www.vulncheck.com/advisories/openclaw-allowlist-bypass-via-unregistered-time-dispatch-wrapper

History

Apr 13, 2026 6:15 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Apr 10, 2026 4:30 PM Description updated. Title updated. First appearance in the feed. Weaknesses updated. Affected versions updated. Affected vendors updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		OpenClaw before 2026.3.22 contains an allowlist bypass vulnerability in system.run approvals that fails to unwrap /usr/bin/time wrappers. Attackers can bypass executable binding restrictions by using an unregistered time wrapper to reuse approval state for inner commands.
Title		OpenClaw < 2026.3.22 - Allowlist Bypass via Unregistered Time Dispatch Wrapper
First Time appeared		Openclaw Openclaw openclaw
Weaknesses		CWE-706
CPEs		cpe:2.3:a:openclaw:openclaw::::::node.js::*
Vendors & Products		Openclaw Openclaw openclaw
References		https://github.com/openclaw/openclaw/commit/39409b6a6dd4239deea682e626bac9ba547bfb14 https://github.com/openclaw/openclaw/commit/630f1479c44f78484dfa21bb407cbe6f171dac87 https://github.com/openclaw/openclaw/security/advisories/GHSA-qm9x-v7cx-7rq4 https://www.vulncheck.com/advisories/openclaw-allowlist-bypass-via-unregistered-time-dispatch-wrapper
Metrics		cvssV3_1 `{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}` cvssV4_0 `{'score': 7.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}`