OpenClaw versions before 2026.3.28 contain an execution approval vulnerability in exec-approvals-allowlist.ts. The vulnerability allows allow-always persistence to trust wrapper carrier executables instead of invoked targets. Attackers can exploit positional carrier executable routing through dispatch wrappers. This enables establishment of broader allowlist entries than intended. The vulnerability weakens execution approval boundaries and security controls.