GoClaw exec approval allowlist bypass via transparent wrapper drift leading to RCE

Vulnerability Overview Title: Exec approval allowlist can be bypassed through transparent wrapper drift in POST /v1/tools/invoke #1200 Description: In GoClaw's tool, a security policy allows authenticated operators to execute shell payloads that should not pass through an allowlist-based security policy. When is enabled, the approval layer only categorizes external command tokens (such as ), while the execution layer passes the full attacker-controlled command string (such as ). Consequently, wrappers like can be permitted, while embedded shell payloads are still executed. Scope Ecosystem: Go Package Name: github.com/nextlevelbuilder/goclowl Affected Versions: < 3.11.3 Fixed Version: 3.11.3 Remediation Patch Version: 3.11.3 POC Code Evidence Logs Impact This is a command execution policy bypass vulnerability. Any deployment relying on to constrain the safe execution policies of authenticated operators or agents may be misled, allowing harmless wrappers to execute while the actual internal shell payload continues to run. In practice, this could lead to unauthorized file writes, arbitrary code execution within the GoClaw process context, access to local workspace contents, and loss of trust in additional tools present on the host. Weakness CWE: CWE-184: Incomplete List of Disallowed Inputs Occurrence Permalink: Link Comments mrqoonie: Confirmed the vulnerability's validity and suggested treating it as part of the same wrapper-aware exec approval fix, rather than a separate fix. mrqoonie: Closed this issue as a duplicate report of #1203 and #1205. Summary This vulnerability allows bypassing the exec approval allowlist through transparent wrapper drift, leading to potential security risks. The remediation is to upgrade to version 3.11.3.

Goal Reached Thanks to every supporter — we hit 100%!

GoClaw exec approval allowlist bypass via transparent wrapper drift leading to RCE

More from this source