PT-2026-25440 · Npm · Openclaw

Published 2026-03-03 · Updated 2026-03-03

OSV

CVSS v4.0

8.6

High

Base vector

AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Summary

The Lobster extension tool execution path used a Windows shell fallback (shell: true) after spawn failures (EINVAL/ENOENT). In that fallback path, shell metacharacters in command arguments can be interpreted by the shell, enabling command injection.

Affected Packages / Versions

• Package: openclaw (npm)
• Affected versions: <= 2026.2.17
• Latest confirmed affected published version: 2026.2.17
• Patched version: 2026.2.19

Technical Details

In affected releases (including v2026.2.17), extensions/lobster/src/lobster-tool.ts retried subprocess launch with shell: true on Windows for EINVAL/ENOENT spawn errors. The fix removes shell fallback and resolves Windows wrappers to explicit executable/script argv execution.

Fix Commit(s)

• ba7be018da354ea9f803ed356d20464df0437916

OpenClaw thanks @allsmog for reporting.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

GHSA-7FCC-CW49-XM78

Affected Products

Openclaw

References · 4

• https://osv.dev/vulnerability/GHSA-7fcc-cw49-xm78 · Vendor Advisory
• https://github.com/openclaw/openclaw · Note
• https://github.com/openclaw/openclaw/security/advisories/GHSA-7fcc-cw49-xm78 · Note
• https://github.com/openclaw/openclaw/commit/ba7be018da354ea9f803ed356d20464df0437916 · Note