Description
OpenClaw versions before 2026.6.6 contain a flaw in host exec environment filtering that could allow Git ext transport to be abused. When the affected feature is enabled and reachable, a lower-trust caller or configured input path could execute or persist actions beyond the caller's intended authorization.
Problem types
Incomplete List of Disallowed Inputs
Product status
Any version before 2026.6.6
2026.6.6 (semver)
Credits
Chinmohan Nayak (@nayakchinmohan)
References
github.com/...enclaw/security/advisories/GHSA-9969-8g9h-rxwm (GitHub Security Advisory (GHSA-9969-8g9h-rxwm))
www.vulncheck.com/...entication-bypass-via-git-ext-transport (VulnCheck Advisory: OpenClaw < 2026.6.6 Authentication Bypass via Git ext transport)