OpenClaw's dispatch-wrapper depth-cap mismatch can bypass shell-wrapper approval gating in system.run allowlist mode
Moderate severity
GitHub Reviewed
Published
Feb 25, 2026
in
openclaw/openclaw
•
Updated Mar 30, 2026
Give feedback on Dependabot alerts