OpenClaw's CSV export feature fails to neutralize characters interpreted by spreadsheet applications as formulas. When a session label or the first user message can be set by a participant with lower trust, an attacker can embed a formula-like string into the exported CSV. If an operator opens the file in a spreadsheet with formula evaluation enabled, that formula will be executed with the privileges of the spreadsheet user, potentially allowing arbitrary code execution or disclosure of data within that environment. The flaw is a form of improper input sanitization identified as CWE-1236.

The vulnerability affects any installation of the npm package openclaw before version 2026.8.1. There are no additional OS or sub‑product constraints listed, so all deployments of the package older than 2026.8.1 are susceptible.

The CVSS base score of 5.3 indicates moderate severity. EPSS data is not available and the vulnerability is not listed in CISA KEV, implying limited known exploitation. Exploitation requires the attacker to set or modify a session label that is subsequently exported to CSV, and the operator must open the file in a spreadsheet that processes formulas—therefore the attack relies on user interaction but still poses a risk when CSV data is shared with spreadsheet users.