https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T16:08:59.216540+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/ghsa-ff98-w8hj-qrxf GHSA-ff98-w8hj-qrxf — OpenClaw plugin runtime command execution is part of trusted plugin boundary 2026-10-24T16:08:59.217609+00:00

Affected: npm: openclaw

### Summary OpenClaw plugins/extensions run in-process and are treated as trusted code. This advisory tracks trust-boundary clarification around plugin runtime command execution (`runtime.system.runCommandWithTimeout`).

### Impact Plugins already execute with the same OS privileges as the OpenClaw process. Exposing runtime command helpers does not cross an additional sandbox boundary.

### Affected Packages / Versions - Package: `openclaw` (npm) - Latest published version reviewed: `2026.2.17` - Affected range for this advisory record: `<= 2026.2.17` - Planned patched version metadata: `2026.2.19` (next release line)

### Fix Commit(s) - `2e421f32dfc589c02706265fd3c3137ffc06c4b1`

### Remediation - Install only trusted plugins. - Use `plugins.allow` to pin explicit trusted plugin IDs. - SECURITY.md now explicitly documents that plugin runtime helpers are convenience APIs, not a sandbox boundary.

OpenClaw thanks @markmusson for reporting.