PT-2026-26385 · Openclaw · Openclaw

Tdjackey · Published 2026-03-03 · Updated 2026-03-20 · CVE-2026-32003

Positive Technologies (AI Summary)

CVSS v4.0

7.5

High

Base vector

AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.2.22

Description OpenClaw contains an environment variable injection issue in the system.run function. This allows attackers to bypass command allowlist restrictions using the SHELLOPTS and PS4 environment variables. An attacker capable of invoking system.run with request-scoped environment variables can execute arbitrary shell commands outside the intended allowlisted command body through bash xtrace expansion. The issue arises because host exec environment sanitization did not block SHELLOPTS and PS4, and request-scoped environment overrides were passed through to shell wrappers, enabling command substitution.

Recommendations Versions prior to 2026.2.22 should be updated. Block SHELLOPTS and PS4 in host exec environment sanitizers. For shell wrappers, reduce request-scoped environment overrides to an explicit allowlist including TERM, LANG, LC *, COLORTERM, NO COLOR, and FORCE COLOR.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

CWE-15

Related Identifiers

CVE-2026-32003

GHSA-2FGQ-7J6H-9RM4

Affected Products

Openclaw

References · 8

• https://github.com/openclaw/openclaw/commit/e80c803fa887f9699ad87a9e906ab5c1ff85bd9a · Patch
• https://github.com/openclaw/openclaw/security/advisories/GHSA-2fgq-7j6h-9rm4 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-2fgq-7j6h-9rm4 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-32003 · Security Note
• https://osv.dev/vulnerability/CVE-2026-32003 · Vendor Advisory
• https://github.com/openclaw/openclaw · Note
• https://twitter.com/CVEnew/status/2034891611784536190 · Twitter Post
• https://vulncheck.com/advisories/openclaw-remote-code-execution-via-shellopts-ps4-environment-injection-in-system-run · Note