PT-2026-26235 · Openclaw+1 · Openclaw+2

Tdjackey · Published 2026-02-19 · Updated 2026-03-20 · CVE-2026-31995

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenClaw versions 2026.1.21 through 2026.2.17

Description The Lobster extension in OpenClaw contains a command injection issue on Windows systems. This occurs due to the fallback mechanism used when spawning processes fails, specifically when shell: true is enabled. Attackers can inject arbitrary commands through arguments provided to the tool, which are then interpreted by cmd.exe. The issue arises when spawn failures trigger shell fallback with shell set to true, allowing attackers to control workflow arguments and execute malicious commands. The Windows shell fallback has been removed in a later version.

Recommendations Update to OpenClaw version 2026.2.19 or later.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2026-05251

CVE-2026-31995

GHSA-8PX5-2GFR-7PH6

GHSA-FG3M-VHRR-8GJ6

Affected Products

Blobster

Openclaw

Windows

References · 12

• https://github.com/openclaw/openclaw/security/advisories/GHSA-fg3m-vhrr-8gj6 · Vendor Advisory
• https://github.com/openclaw/openclaw/commit/ba7be018da354ea9f803ed356d20464df0437916 · Patch
• https://osv.dev/vulnerability/CVE-2026-31995 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-05251 · Security Note
• https://osv.dev/vulnerability/GHSA-8px5-2gfr-7ph6 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-fg3m-vhrr-8gj6 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31995 · Security Note
• https://github.com/openclaw/openclaw · Note
• https://twitter.com/CVEarity/status/2034880054816383474 · Twitter Post
• https://twitter.com/RedPacketSec/status/2034735877205729693 · Twitter Post
• https://vulncheck.com/advisories/openclaw-command-injection-via-windows-shell-fallback-in-lobster-extension · Note
• https://twitter.com/CVEnew/status/2034520389661889004 · Twitter Post