OpenClaw versions prior to 2026.5.18 implement an exec allowlist that relies on glob matching. The implementation can be exploited by crafting input paths that traverse the allowlist glob patterns, allowing lower‑trust callers to execute or persist actions that are outside the intended authorization scope. This bypass enables the attacker to gain unauthorized access to privileged functions and can be considered a privileged escalation vulnerability (CWE‑22).

The vulnerability affects the OpenClaw project, specifically all releases before 2026.5.18. Any deployment using an impacted version with the exec allowlist feature enabled is susceptible.

The CVSS base score of 7.7 places the issue in the high‑severity range. The EPSS score of less than 1 % and the absence from CISA’s KEV catalog together indicate a low probability of widespread exploitation. Exploitability requires an attacker to supply a carefully crafted path input to the vulnerable feature; this is feasible only in environments where the application accepts unvalidated path data. Consequently, organizations running OpenClaw should treat this as a high‑impact risk, but with a low likelihood of attack when the exec allowlist feature is enabled.