CVE-2026-26325

OpenClaw is a personal AI assistant. Prior to version 2026.2.14, a mismatch between `rawCommand` and `command[]` in the node host `system.run` handler could cause allowlist/approval evaluation to be performed on one command while executing a different argv. This only impacts deployments that use the node host / companion node execution path (`system.run` on a node), enable allowlist-based exec policy (`security=allowlist`) with approval prompting driven by allowlist misses (for example `ask=on-miss`), allow an attacker to invoke `system.run`. Default/non-node configurations are not affected. Version 2026.2.14 enforces `rawCommand`/`command[]` consistency (gateway fail-fast + node host validation).

• CWE-284

• https://github.com/openclaw/openclaw/commit/cb3290fca32593956638f161d9776266b90ab891Patch
• https://github.com/openclaw/openclaw/releases/tag/v2026.2.14Product, Release Notes
• https://github.com/openclaw/openclaw/security/advisories/GHSA-h3f9-mjwj-w476Patch, Vendor Advisory

Published

Feb 19, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-26319OpenClaw is a personal AI assistant. Versions 2026.2.13 and …7.5
• CVE-2026-26320OpenClaw is a personal AI assistant. OpenClaw macOS desktop …6.5
• CVE-2026-26321OpenClaw is a personal AI assistant. Prior to OpenClaw versi…7.5
• CVE-2026-26322OpenClaw is a personal AI assistant. Prior to OpenClaw versi…7.6
• CVE-2026-26323OpenClaw is a personal AI assistant. Versions 2026.1.8 throu…8.8
• CVE-2026-26324OpenClaw is a personal AI assistant. Prior to version 2026.2…7.5
• CVE-2026-26326OpenClaw is a personal AI assistant. Prior to version 2026.2…4.3
• CVE-2026-26327OpenClaw is a personal AI assistant. Discovery beacons (Bonj…6.5
• CVE-2026-26328OpenClaw is a personal AI assistant. Prior to version 2026.2…6.5
• CVE-2026-26329OpenClaw is a personal AI assistant. Prior to version 2026.2…6.5
• CVE-2026-2633The Gutenberg Blocks with AI by Kadence WP plugin for WordPr…4.3
• CVE-2026-26330Envoy is a high-performance edge/middle/service proxy. Prior…7.5