openclaw/docs/internal/codex/2026-03-29-exec-target-override-fix.md

title, summary, author, github_username, created

title	summary	author	github_username	created
Exec target override bypass fix	Hardened exec target resolution so auto defaults no longer allow model-requested host overrides.	Codex <codex@openai.com>	codex	2026-03-29

Investigated a high-severity regression in exec target resolution.

What changed:

• Confirmed current behavior allowed configuredTarget=auto with requestedTarget=gateway/node, which selects host execution even when sandbox is available.
• Restored fail-closed allowlist behavior by requiring requested target to exactly match configured target.
• Updated the runtime unit test to verify host overrides are rejected when configured target is auto.

Why:

• auto should choose runtime host automatically, not grant untrusted host-selection overrides.