CVE-2026-22169 HIGH

CVE-2026-22169: OpenClaw < 2026.2.22 - Allowlist Bypass via sort Configuration in safeBins

Vendor Openclaw

Product OpenClaw

Weakness CWE-78

Published March 18, 2026

Last update March 25, 2026

View on NVD All CVEs

CVSS base score

7.1/10

Attack vector Local

Attack complexity Low

Privileges required High

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in the safeBins configuration that allows attackers to invoke external helpers through the compress-program option. When sort is explicitly added to tools.exec.safeBins, remote attackers can bypass intended safe-bin approval constraints by leveraging the compress-program parameter to execute unauthorized external programs.

Key dates

02Disclosure timeline

March 18, 2026 CVE published

March 25, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-22169

Related vulnerabilities

04Related CVE

CVE-2025-31693 AI (Artificial Intelligence) - Moderately critical - Gadget Chain - SA-CONTRIB-2025-022 CVE-2023-26490 mailcow is vulnerable to shell command injection via xoauth2 authentication in imapsync CVE-2021-43857 Gerapy may contain remote code execution vulnerability CVE-2026-43943 electerm: RCE via malicious SSH server filename in openFileWithEditor CVE-2024-12987 DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection