Cloud Vulnerability DB
A community-led vulnerabilities database
Vulnerability DatabaseGHSA-ff98-w8hj-qrxf
GHSA-ff98-w8hj-qrxf:
OpenClaw (formerly Moltbot or Clawdbot) vulnerability analysis and mitigation
Summary
OpenClaw plugins/extensions run in-process and are treated as trusted code. This advisory tracks trust-boundary clarification around plugin runtime command execution (runtime.system.runCommandWithTimeout).
Impact
Plugins already execute with the same OS privileges as the OpenClaw process. Exposing runtime command helpers does not cross an additional sandbox boundary.
Affected Packages / Versions
- Package:
openclaw(npm) - Latest published version reviewed:
2026.2.17 - Affected range for this advisory record:
<= 2026.2.17 - Planned patched version metadata:
2026.2.19(next release line)
Fix Commit(s)
2e421f32dfc589c02706265fd3c3137ffc06c4b1
Remediation
- Install only trusted plugins.
- Use
plugins.allowto pin explicit trusted plugin IDs. - SECURITY.md now explicitly documents that plugin runtime helpers are convenience APIs, not a sandbox boundary. OpenClaw thanks @markmusson for reporting.
Source: NVD
Related OpenClaw (formerly Moltbot or Clawdbot) vulnerabilities:
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Additional Wiz resources
Get a personalized demo
Ready to see Wiz in action?
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management