PT-2026-23538 · Openclaw · Openclaw

Christos-Eth · Published 2026-02-18 · Updated 2026-04-08 · CVE-2026-28463

Positive Technologies (AI Summary)

CVSS v4.0

8.6

High

Base vector

AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions openclaw versions prior to 2026.2.14

Description The OpenClaw exec-approvals allowlist validation checks tokens before expansion, but execution uses shell expansion. This allows safe binaries like head, tail, or grep to read arbitrary local files through glob patterns or environment variables. An authorized caller or prompt-injection attack can exploit this to disclose files readable by the gateway or node process when host execution is enabled in allowlist mode. The issue is configuration-dependent and is not exercised by default settings. The vulnerable component uses the sh -c shell for execution.

Recommendations Update to version 2026.2.14 or later.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-28463

GHSA-XVHF-X56F-2HPP

Affected Products

Openclaw

References · 12

• https://github.com/openclaw/openclaw/commit/77b89719d5b7e271f48b6f49e334a8b991468c3b · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-28463 · Security Note
• https://osv.dev/vulnerability/CVE-2026-28463 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-xvhf-x56f-2hpp · Vendor Advisory
• https://github.com/openclaw/openclaw · Note
• https://github.com/openclaw/openclaw/security/advisories/GHSA-xvhf-x56f-2hpp · Vendor Advisory, Patch
• https://github.com/openclaw/openclaw/releases/tag/v2026.2.14 · Note
• https://twitter.com/RedPacketSec/status/2029725292181303448 · Twitter Post
• https://twitter.com/CVEnew/status/2030385184114159830 · Twitter Post
• https://twitter.com/TheHackerWire/status/2029923792508838329 · Twitter Post
• https://t.me/cveNotify/158451 · Telegram Post
• https://vulncheck.com/advisories/openclaw-arbitrary-file-read-via-shell-expansion-in-safe-bins-allowlist · Note