PT-2026-26237 · Openclaw · Openclaw

Tdjackey · Published 2026-03-02 · Updated 2026-03-19 · CVE-2026-31997

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.3.1

Description OpenClaw fails to properly validate executable identity for non-path-like argv[0] tokens during system.run approvals. This allows for post-approval executable rebind attacks, where an attacker can modify the PATH resolution after approval to execute a different binary than the operator initially approved, potentially leading to arbitrary command execution. The system.run approvals did not pin executable identity, and path-token commands were not pinned to canonical executable identity (realpath) across approval and execution.

Recommendations Versions prior to 2026.3.1 should be updated to version 2026.3.1 or later.

Fix

Untrusted Search Path

Time Of Check To Time Of Use

Weakness Enumeration

CWE-426

CWE-367

Related Identifiers

BDU:2026-05006

CVE-2026-31997

GHSA-Q399-23R3-HFX4

GHSA-Q86M-697P-H7FH

Affected Products

Openclaw

References · 10

• https://github.com/openclaw/openclaw/security/advisories/GHSA-q399-23r3-hfx4 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-05006 · Security Note
• https://osv.dev/vulnerability/GHSA-q86m-697p-h7fh · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31997 · Security Note
• https://osv.dev/vulnerability/CVE-2026-31997 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-q399-23r3-hfx4 · Vendor Advisory
• https://github.com/openclaw/openclaw · Note
• https://twitter.com/CVEnew/status/2034520387837440049 · Twitter Post
• https://twitter.com/cyberbivash/status/2034467541989404892 · Twitter Post
• https://vulncheck.com/advisories/openclaw-executable-rebind-via-unbound-path-token-in-system-run-approvals · Note