[openclaw] OpenClaw: Exec approval allowlist patterns overmatched on POSIX paths

**[openclaw] OpenClaw: Exec approval allowlist patterns overmatched on POSIX paths**

Summary matchesExecAllowlistPattern normalized patterns and targets with lowercasing and compiled glob matching too broadly on POSIX. wildcard could match /, which allowed matches to cross path segments. Impact These matching rules could overmatch allowlist entries and permit commands or executable paths that an operator did not intend to approve. Affected versions openclaw <= 2026.3.8 Patch Fixed in openclaw 2026.3.11 and included in later releases such as 2026.3.12. Exec allowlist matching now respects the intended path semantics, and regression tests cover the POSIX case-folding and slash-crossing cases...

---

**[devsupporter 해설]**

이 기사는 GitHub Security Advisories에서 제공하는 최신 개발 동향입니다. 관련 도구나 기술에 대해 더 알아보시려면 원본 링크를 참고하세요.