OpenClaw Windows Node Arbitrary Command Execution via Weak ExecApproval Wildcard Policy

OpenClaw Windows Node Vulnerability Summary (GHS-132-8759-wzfp) Vulnerability Overview Title: Exec-approval policy weakening: accepts broad wildcard-executable allow rules (e.g. ), allowing a caller to self-grant blanket arbitrary command execution (Execution approval policy weakening: accepts overly broad wildcard executable allow rules (e.g., ), enabling a caller to self-authorize arbitrary command execution.) Severity: High (8.5/10) Core Issue: The API on Windows nodes allows proxies connected to the gateway to execute commands on the host. This vulnerability stems from accepting overly permissive "allow" rules (such as ), which enables the caller to self-authorize the execution of arbitrary commands. The validator (validator) only checks the rule structure and does not strictly restrict wildcards. The matcher (matcher) uses as a wildcard, causing a rule to match all commands. Once this rule is set, the policy is accepted and persisted, allowing all subsequent commands to proceed. Impact Scope Affected Software: Affected Versions: Patched Versions: Attack Vector: Local (Local) Complexity: Low (Low) Required Privileges: None (None) User Interaction: None (None) Impact: The attacker can bypass the "Run system tools" gateway control. The attacker can self-grant "arbitrary command execution" privileges, thereby gaining full control of the host. The host's confidentiality, integrity, and availability are all at risk. POC / Exploit Code The following PoC code is provided on the page, demonstrating how to execute arbitrary commands from a "no rule" state by setting a rule: Remediation Status: Implemented and verified, ready to be pushed to the allow branch. Fix Logic: Add checks in requiring that the executable component must be a concrete literal, prohibiting the use of wildcards. Fix Code: Verification**: Regression tests were added to confirm that wildcard rules such as are rejected, while legitimate specific commands (e.g., ) remain accepted.

Goal Reached Thanks to every supporter — we hit 100%!

OpenClaw Windows Node Arbitrary Command Execution via Weak ExecApproval Wildcard Policy

More from this source