PT-2026-26225 · Openclaw · Openclaw

Tdjackey · Published 2026-03-19 · Updated 2026-03-19 · CVE-2026-28460

NVD

CVSS v3.1

8.8

High

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in system.run that allows attackers to execute non-allowlisted commands by splitting command substitution using shell line-continuation characters. Attackers can bypass security analysis by injecting $ followed by a newline and opening parenthesis inside double quotes, causing the shell to fold the line continuation into executable command substitution that circumvents approval boundaries.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-28460

Affected Products

Openclaw

References · 6

• https://github.com/openclaw/openclaw/security/advisories/GHSA-9868-vxmx-w862 · Vendor Advisory
• https://github.com/openclaw/openclaw/commit/3f0b9dbb36c86e308267924c0d3d4a4e1fc4d1e9 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-28460 · Security Note
• https://twitter.com/VulmonFeeds/status/2034524155349987599 · Twitter Post
• https://twitter.com/CVEnew/status/2034520398704812353 · Twitter Post
• https://vulncheck.com/advisories/openclaw-allowlist-bypass-via-shell-line-continuation-command-substitution-in-system-run · Note