{"items":[{"id":"NVI-00013871","kind":"vulnerability","title":"OpenClaw's POSIX node system.run safe-bin allowlist could be widened by shell expansion","revision":1,"unknowns":["Customer inventory, deployment, reachability and exploitation have not been inspected."],"lifecycle":"active","identifiers":["GHSA-mhq8-78pj-5j79","CVE-2026-53831"],"plain_summary":"GitHub lists this reviewed advisory for openclaw. Published version ranges and source prerequisites are shown below; this is not an inspection of a visitor’s application.","review_status":"source_listed","control_topics":[],"public_actions":[{"summary":"Identify the exact component and deployed version, examine the linked publisher’s conditions, and retain evidence of any mitigation.","source_ids":["sr-1309552872b0a3ffdc92f05de818413e"],"action_type":"investigate","limitations":"Confirm current vendor support, compatibility and deployment evidence. This report has not tested a fix in your system.","current_supported_target":null}],"schema_version":"1.1.0","source_metrics":[{"kind":"CVSS","as_of":"2026-08-25T16:38:52.000Z","value":"7.1 high","meaning":"GitHub source severity; exploitability and local consequence require separate evidence.","source_id":"sr-1309552872b0a3ffdc92f05de818413e"}],"why_it_matters":"Published affected context helps an owner decide what evidence to gather. This report has not examined your application.","related_sources":[{"id":"sr-1309552872b0a3ffdc92f05de818413e","url":"https://github.com/advisories/GHSA-mhq8-78pj-5j79","basis":"vendor_advisory","notes":"GitHub Advisory Database; CC-BY-4.0. Each advisory links its original attribution. Null normalizes fields.","title":"GHSA-mhq8-78pj-5j79","publisher":"GitHub Advisory Database","observed_at":"2026-11-02T09:56:37.775Z"}],"affected_context":[{"certainty":"source_listed","source_ids":["sr-1309552872b0a3ffdc92f05de818413e"],"technology":"openclaw","known_exclusions":[],"conditions_summary":"### Summary\n\nOn POSIX nodes, OpenClaw's `system.run` safe-bin checks could approve a command before shell expansion changed how the command was interpreted. A value that appeared to be a safe-bin argument could expand into additional shell words and become a file operand.\n\nThis issue is limited to paired POSIX node execution through `system.run` with safe-bin or allowlist-style auto-approval. It is not an unauthenticated node takeover.\n\n### Affected configurations\n\nThis affects deployments where:\n\n- a POSIX node is paired to the gateway\n- `system.run` is reachable by an authenticated operator or agent flow\n- exec policy uses safe-bin or allowlist-based auto-approval\n- the approved command contains shell-expanded values that can change argv shape\n\n### Impact\n\nA lower-privilege operator flow could cause an approved safe-bin command to read a node-local file that was not intended by the policy. Depending on the local files available to the node process, this could expose OpenClaw configuration data or other node-local information.\n\nThe issue is a policy-enforcement gap in argv validation, not a general statement that every safe-bin command is unsafe.\n\n### Patched Versions\n\nThe first s","public_affected_ranges":["< 2026.5.18"]}],"null_published_at":"2026-11-02T10:00:37.164Z","source_updated_at":"2026-08-25T16:38:52.000Z","source_disclosed_at":"2026-07-02T16:05:38.000Z","is_synthetic_fixture":false,"null_last_reviewed_at":null,"public_change_summary":"First indexed by Null; source disclosure date is shown separately.","null_first_observed_at":"2026-11-02T09:56:37.775Z"}],"next_cursor":null,"snapshot_revision":"42594"}