All issues

[Security] Non-owner embedded agent runs expose owner-only `gateway` and `cron` tools in `openclaw-cn`

#610

· YLChen-007 opened

on Aug 6, 2026

[Security] Non-owner command-authorized senders can access owner-only `gateway` and `cron` tools in `openclaw-cn`

#609

· YLChen-007 opened

on Aug 6, 2026

[Security] POSIX exec-approvals allowlist overmatch lets unintended binaries execute via node-host `system.run`

#608

· YLChen-007 opened

on Aug 6, 2026

[Security] node-host `system.run` allowlist can be bypassed with `env -S` to reach arbitrary shell execution

#607

· YLChen-007 opened

on Aug 6, 2026

[Security] OpenClaw CN gateway `exec` safeBins validation leaks workdir file existence through state-dependent allowlist decisions

#606

· YLChen-007 opened

on Aug 6, 2026

[Security] Sandboxed image tool builder regression allows host-local image disclosure to the configured vision provider

#605

· YLChen-007 opened

on Aug 6, 2026

[Security] OpenClaw CN node-host `system.run` safeBins long-option bypass executes an external helper via `sort --compress-prog` without approval

#604

· YLChen-007 opened

on Aug 6, 2026

[Security] Sandboxed `write` tool can overwrite files outside the workspace through a dangling symlink leaf

#603

· YLChen-007 opened

on Aug 6, 2026

[Security] Browser `/act` click interactions bypass the configured SSRF navigation policy and reach loopback targets

#602

· YLChen-007 opened

on Aug 6, 2026

[Security] Sandboxed `message` tool can read host files outside `sandboxRoot` via `media=file://...` during attachment hydration

#601

· YLChen-007 opened

on Aug 6, 2026

[Security] `system.run` allowlist approval bypass via nested `/usr/bin/env` dispatch wrappers in `openclaw-cn`

#600

· YLChen-007 opened

on Aug 6, 2026

[Security] Non-owner agent tool dispatch exposes admin-only `cron` and `gateway` actions in openclaw-cn

#599

· YLChen-007 opened

on Aug 6, 2026