Description
OpenClaw versions prior to 2026.2.24 contain a command injection vulnerability in the system.run shell-wrapper that allows attackers to execute hidden commands by injecting positional argv carriers after inline shell payloads. Attackers can craft misleading approval text while executing arbitrary commands through trailing positional arguments that bypass display context validation.
Published: 2026-03-21
Score: 5.8 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution
Action: Immediate Patch
AI Analysis

Impact

The vulnerability is a command injection flaw in the system.run shell-wrapper of OpenClaw. Attackers can embed hidden commands by inserting positional argv carriers after an inline shell payload. This allows execution of arbitrary commands that bypass display context validation while hiding them within misleading approval text.

Affected Systems

All OpenClaw installations running a version earlier than 2026.2.24 are affected. The vulnerability exists in the Node.js-based OpenClaw system and impacts any deployment using the affected package from the OpenClaw repository.

Risk and Exploitability

The CVSS score of 5.8 indicates moderate severity, and the EPSS score of fewer than 1% suggests that widespread exploitation is unlikely. The vulnerability is not listed in the CISA KEV catalog. Based on the description, the attack vector is inferred to be remote, requiring an attacker to supply crafted input to the system.run shell-wrapper; however, no explicit broadcast of vector details is provided in the data.

Generated by OpenCVE AI on March 23, 2026 at 18:26 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade the OpenClaw package to version 2026.2.24 or later.

Generated by OpenCVE AI on March 23, 2026 at 18:26 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Github GHSA Github GHSA GHSA-6rcp-vxwf-3mfp OpenClaw's system.run shell-wrapper positional argv carriers could execute hidden commands under misleading approval text
History

Mon, 23 Mar 2026 17:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-77
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Sat, 21 Mar 2026 05:30:00 +0000

Type Values Removed Values Added
Description OpenClaw versions prior to 2026.2.24 contain a command injection vulnerability in the system.run shell-wrapper that allows attackers to execute hidden commands by injecting positional argv carriers after inline shell payloads. Attackers can craft misleading approval text while executing arbitrary commands through trailing positional arguments that bypass display context validation.
Title OpenClaw < 2026.2.24 - Hidden Command Execution via Shell-Wrapper Positional argv Carriers
First Time appeared Openclaw
Openclaw openclaw
Weaknesses CWE-436
CPEs cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*
Vendors & Products Openclaw
Openclaw openclaw
References
Metrics cvssV3_1

{'score': 6.4, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H'}

cvssV4_0

{'score': 5.8, 'vector': 'CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Openclaw Openclaw
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-03-23T16:44:28.150Z

Reserved: 2026-03-10T19:48:47.515Z

Link: CVE-2026-32052

cve-icon Vulnrichment

Updated: 2026-03-23T16:44:24.542Z

cve-icon NVD

Status : Analyzed

Published: 2026-03-21T01:17:08.287

Modified: 2026-03-23T17:07:49.007

Link: CVE-2026-32052

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-03-25T14:44:17Z

Weaknesses