PT-2026-23538 · Openclaw · Openclaw

Christos-Eth · CVE-2026-28463 · Published 2026-02-18 · Updated 2026-04-08

Positive Technologies (AI Summary)

CVSS v4.0

8.6

High

Base vector

AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions openclaw versions prior to 2026.2.14

Description The OpenClaw exec-approvals allowlist validation checks tokens before expansion, but execution uses shell expansion. This allows safe binaries like head, tail, or grep to read arbitrary local files through glob patterns or environment variables. An authorized caller or prompt-injection attack can exploit this to disclose files readable by the gateway or node process when host execution is enabled in allowlist mode. The issue is configuration-dependent and is not exercised by default settings. The vulnerable component uses the sh -c shell for execution.

Recommendations Update to version 2026.2.14 or later.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-28463

GHSA-XVHF-X56F-2HPP

Affected Products

Openclaw

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/28xxx/CVE-2026-28463.json · Exploit
• https://github.com/openclaw/openclaw/commit/77b89719d5b7e271f48b6f49e334a8b991468c3b · Patch
• https://osv.dev/vulnerability/CVE-2026-28463 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-xvhf-x56f-2hpp · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-28463 · Security Note
• https://github.com/openclaw/openclaw · Note
• https://github.com/openclaw/openclaw/security/advisories/GHSA-xvhf-x56f-2hpp · Vendor Advisory, Patch
• https://github.com/openclaw/openclaw/releases/tag/v2026.2.14 · Note
• https://t.me/cveNotify/158451 · Telegram Post
• https://vulncheck.com/advisories/openclaw-arbitrary-file-read-via-shell-expansion-in-safe-bins-allowlist · Note
• https://twitter.com/RedPacketSec/status/2029725292181303448 · Twitter Post
• https://twitter.com/TheHackerWire/status/2029923792508838329 · Twitter Post
• https://twitter.com/CVEnew/status/2030385184114159830 · Twitter Post