PT-2026-26234 · Openclaw · Openclaw

Tdjackey · Published 2026-02-19 · Updated 2026-03-20 · CVE-2026-31994

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.2.19

Description OpenClaw Windows scheduled task script generation has a local command injection issue due to unsafe handling of cmd metacharacters and expansion-sensitive characters in gateway.cmd files. Local attackers with control over service script generation arguments can inject arbitrary commands by providing metacharacter-only values or CR/LF sequences, leading to unintended code execution in the scheduled task context. The issue stems from incomplete cmd argument quoting, handling of expansion-sensitive characters, and missing CR/LF guards in the script generation process, specifically within src/daemon/schtasks.ts. The fix involves separating schtasks argument quoting, quoting cmd metacharacter arguments, escaping expansion cases, rejecting CR/LF characters in arguments and descriptions, and adding regression tests.

Recommendations OpenClaw versions prior to 2026.2.19 should be updated to version 2026.2.19 or later.

Fix

OS Command Injection

Improper Encoding or Escaping of Output

Weakness Enumeration

CWE-78

CWE-116

Related Identifiers

BDU:2026-05008

CVE-2026-31994

GHSA-5GQG-MQH5-2V39

GHSA-MQR9-VQHQ-3JXW

Affected Products

Openclaw

References · 14

• https://github.com/openclaw/openclaw/security/advisories/GHSA-mqr9-vqhq-3jxw · Vendor Advisory
• https://github.com/openclaw/openclaw/commit/280c6b117b2f0e24f398e5219048cd4cc3b82396 · Patch
• https://osv.dev/vulnerability/GHSA-5gqg-mqh5-2v39 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-05008 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31994 · Security Note
• https://osv.dev/vulnerability/GHSA-mqr9-vqhq-3jxw · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-31994 · Vendor Advisory
• https://github.com/openclaw/openclaw · Note
• https://twitter.com/CVEarity/status/2034879972280869344 · Twitter Post
• https://twitter.com/CVEnew/status/2034520390580498943 · Twitter Post
• https://vulncheck.com/advisories/openclaw-local-command-injection-via-unsafe-cmd-argument-handling-in-windows-scheduled-task · Note
• https://twitter.com/VulmonFeeds/status/2034493438448583037 · Twitter Post
• https://twitter.com/vuln_tracker/status/2034696935341224267 · Twitter Post
• https://twitter.com/RedPacketSec/status/2034508375594037642 · Twitter Post