Description
OpenClaw versions before 2026.8.1 contain a command parser vulnerability where escaped newlines confuse exec allowlist parsing, allowing hidden commands to execute. Attackers can craft input with escaped newlines to bypass allowlist validation and execute additional commands without expected authorization prompts.
Published: 2026-09-26
Score: 8.6 High
EPSS: < 1% Very Low
KEV: No
Impact: Command Injection
Action: Immediate Patch
AI Analysis

Impact

The vulnerability is a command parser flaw that allows an attacker to embed escaped newline characters in input. These escaped newlines confuse the system’s exec allowlist logic, enabling hidden commands to be interpreted as executable code. As a result, an attacker can run arbitrary system commands, potentially gaining full control of the host. This flaw is a classic command injection (CWE‑78) and directly affects confidentiality, integrity, and availability.

Affected Systems

OpenClaw is affected. Any installation of OpenClaw prior to version 2026.8.1 is vulnerable to this command‑injection flaw; later releases have the fix applied.

Risk and Exploitability

The CVSS score of 8.6 places the vulnerability in the high‑severity class. No EPSS data is currently available, and it is not listed in the CISA KEV catalog, but the presence of a public advisory and a known exploit path suggests that attackers could still target it. Exploitability appears to require an attacker who can deliver crafted input to the OpenClaw application, which may be done remotely over exposed services.

Generated by OpenCVE AI on September 26, 2026 at 04:35 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade the product to OpenClaw 2026.8.1 or newer, which includes the patch for the command‑injection flaw.
  • Prior to upgrading, sanitize all input to the command parser by rejecting or removing escaped newline characters so that the allowlist can process only plain commands.
  • Enforce a strict command allowlist at the application layer so that only a predefined set of safe commands can be executed, preventing unintended command execution even if input escaping is bypassed.

Generated by OpenCVE AI on September 26, 2026 at 04:35 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 05 Oct 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Sat, 26 Sep 2026 02:30:00 +0000

Type Values Removed Values Added
Description OpenClaw versions before 2026.8.1 contain a command parser vulnerability where escaped newlines confuse exec allowlist parsing, allowing hidden commands to execute. Attackers can craft input with escaped newlines to bypass allowlist validation and execute additional commands without expected authorization prompts.
Title OpenClaw before 2026.8.1 Command Injection via Escaped Newlines
First Time appeared Openclaw
Openclaw openclaw
Weaknesses CWE-78
CPEs cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*
Vendors & Products Openclaw
Openclaw openclaw
References
Metrics cvssV3_1

{'score': 8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H'}

cvssV4_0

{'score': 8.6, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Openclaw Openclaw
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-10-05T14:55:03.674Z

Reserved: 2026-09-26T01:02:38.348Z

Link: CVE-2026-100559

cve-icon Vulnrichment

Updated: 2026-10-05T14:50:49.799Z

cve-icon NVD

Status : Deferred

Published: 2026-09-26T03:17:02.680

Modified: 2026-10-05T15:17:11.420

Link: CVE-2026-100559

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-26T07:00:09Z

Weaknesses
  • CWE-78

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')