PT-2026-27289 · Npm · Openclaw

Published 2026-03-13 · Updated 2026-03-13

OSV

CVSS v4.0

8.5

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Summary

OpenClaw automatically discovered and loaded plugins from .openclaw/extensions/ inside the current workspace without an explicit trust or install step. A malicious repository could include a crafted workspace plugin that executed as soon as a user ran OpenClaw from that cloned directory.

Impact

Opening or running OpenClaw in an untrusted repository could lead to arbitrary code execution under the user's account.

Affected versions

openclaw <= 2026.3.11

Patch

Fixed in openclaw 2026.3.12. Workspace plugin loading now requires explicit trusted state before execution. Users should update to 2026.3.12 or later and avoid running OpenClaw inside untrusted repositories on older releases.

Fix

Weakness Enumeration

CWE-829

Related Identifiers

GHSA-99QW-6MR3-36QR

Affected Products

Openclaw

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-32920 · Security Note
• https://osv.dev/vulnerability/GHSA-99qw-6mr3-36qr · Vendor Advisory
• https://github.com/openclaw/openclaw · Note
• https://github.com/openclaw/openclaw/security/advisories/GHSA-99qw-6mr3-36qr · Note
• https://github.com/openclaw/openclaw/releases/tag/v2026.3.12 · Note
• https://vulncheck.com/advisories/openclaw-arbitrary-code-execution-via-auto-discovery-of-workspace-plugins · Note