PT-2026-38248 · Openclaw · Openclaw

Vladimir Tokarev · Published 2026-04-23 · Updated 2026-05-28 · CVE-2026-44115

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.4.22

Description An exec allowlist analysis issue allows shell expansion to be hidden within unquoted heredoc bodies. Attackers can bypass allowlist validation by embedding shell expansion tokens in heredoc bodies, enabling the execution of unapproved commands at runtime. This can lead to the leakage of API keys through paths that appear safe during validation. Approximately 245,000 instances are potentially exposed.

Recommendations Update to version 2026.4.22 or later.

Fix

Incomplete List of Disallowed Inputs

Weakness Enumeration

CWE-184

Related Identifiers

BDU:2026-08025

CVE-2026-44115

Affected Products

Openclaw

References · 18

• https://github.com/openclaw/openclaw/commit/b2e8b7d4bb2f22eaa16f5c4b07547774e90b65a5 · Patch
• https://github.com/openclaw/openclaw/security/advisories/GHSA-x3h8-jrgh-p8jx · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-08025 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-44115 · Security Note
• https://t.me/true_secator/8221 · Telegram Post
• https://vulncheck.com/advisories/openclaw-shell-expansion-bypass-in-unquoted-heredocs-via-exec-allowlist · Note
• https://twitter.com/CVEnew/status/2052430105452912880 · Twitter Post
• https://t.me/CVEtracker/52909 · Telegram Post
• https://reddit.com/r/pwnhub/comments/1tgnwvt/openclaw_flaws_enable_backdoor_access_through · Reddit Post
• https://reddit.com/r/artificial/comments/1tq0t1g/the_openclaw_crisis_is_the_most_complete_case · Reddit Post
• https://twitter.com/humanaifusion/status/2056413951357759894 · Twitter Post
• https://reddit.com/r/pwnhub/comments/1tdyfar/openclaw_vulnerabilities_enable_data_theft_and · Reddit Post
• https://twitter.com/VulmonFeeds/status/2052133367496179970 · Twitter Post
• https://twitter.com/MBelckadi/status/2055539321386778648 · Twitter Post
• https://twitter.com/brandonbango/status/2055344980835614796 · Twitter Post