[openclaw] OpenClaw: Node system.run approval bypass via parent-symlink cwd rebind

**[openclaw] OpenClaw: Node system.run approval bypass via parent-symlink cwd rebind**

Summary For host=node executions, approval context could be bypassed after approval-time by rebinding a writable parent symlink in cwd while preserving the visible cwd string. Affected Packages / Versions Package: openclaw (npm) Affected: <= 2026.2.25 Fixed: >= 2026.2.26 (planned next npm release) Impact A command approved for one filesystem location could execute from a different location if a mutable parent symlink changed between approval and execution. Fix Added immutable approval-time plan preparation (system.run.prepare) and systemRunPlanV2 canonical fields (argv, cwd, agentId, sessionKey). Enforced canonical plan values through approval request storage and forwarding-time sanitization. Rejected mutable parent-symlink path components during approval-plan building to block symlink rebind bypass...

---

**[devsupporter 해설]**

이 기사는 GitHub Security Advisories에서 제공하는 최신 개발 동향입니다. 관련 도구나 기술에 대해 더 알아보시려면 원본 링크를 참고하세요.