OpenClaw Windows Node Exec-Approval Bypass via Pipeline/Command Substitution (GHSA-33x2-vd2f-wy8h)

OpenClaw Windows Node Vulnerability Summary (GHSA-33x2-vd2f-wy8h) 1. Vulnerability Overview Title: Execution Approval Deny Bypass. Type: CWE-863 (Improper Authorization) / CWE-184 (Incomplete List of Unchecked Inputs). Principle: On Windows nodes, relies on execution approval policies to prevent callers from hiding commands. However, its shell unpacker ( ) fails to handle pipe characters ( ) and command substitutions ( , ) when decomposing the requested command into multiple targets. Impact: Attackers can hide malicious commands within pipes or subshells, causing the approval policy to evaluate only the seemingly benign first half (e.g., ) while ignoring the malicious second half. This results in benign allow rules silently executing unreviewed malicious code (e.g., file deletion, script downloading). 2. Scope of Impact Affected Software: . Affected Versions: The current main branch (verified ) and earlier versions. CVSS Score: 8.8 (High) - Network attack vector, low complexity. 3. POC / Exploit Code The page provides the following test case (PoC) to demonstrate the bypass logic: 4. Recommended Fix It is recommended to modify the unpacker (decomposer) to identify the categories of commands actually executed by the shell, specifically including: 1. Handling Pipe Characters ( ): In , treat a single as a top-level separator. Key Logic: Consume the second (i.e., handle as an operator) to ensure that every stage (stage) within the pipe is treated as an independent evaluation target. Code Logic Example: 2. Handling Command Substitution ( , ): In , scan and identify areas wrapped in ... and backticks. Key Logic: Ensure these areas are evaluated as additional at , thereby triggering approval checks. Fix Objective: Ensure that all command stages executed via pipes or subshells undergo a complete evaluation by the approval policy, eliminating security blind spots for "silent execution."

Goal Reached Thanks to every supporter — we hit 100%!

OpenClaw Windows Node Exec-Approval Bypass via Pipeline/Command Substitution (GHSA-33x2-vd2f-wy8h)

More from this source