PT-2026-38248 · Openclaw · Openclaw

Vladimir Tokarev · CVE-2026-44115 · Published 2026-04-23 · Updated 2026-05-28

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.4.22

Description An exec allowlist analysis issue allows shell expansion to be hidden within unquoted heredoc bodies. Attackers can bypass allowlist validation by embedding shell expansion tokens in heredoc bodies, enabling the execution of unapproved commands at runtime. This can lead to the leakage of API keys through paths that appear safe during validation. Approximately 245,000 instances are potentially exposed.

Recommendations Update to version 2026.4.22 or later.

Exploit

Fix

Incomplete List of Disallowed Inputs

Information Disclosure

Weakness Enumeration

CWE-184

CWE-200

Related Identifiers

BDU:2026-08025

CVE-2026-44115

GHSA-X3H8-JRGH-P8JX

Affected Products

Openclaw

References · 22

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44115.json · Exploit
• https://github.com/openclaw/openclaw/commit/b2e8b7d4bb2f22eaa16f5c4b07547774e90b65a5 · Patch
• https://github.com/openclaw/openclaw/security/advisories/GHSA-x3h8-jrgh-p8jx · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-44115 · Security Note
• https://osv.dev/vulnerability/GHSA-x3h8-jrgh-p8jx · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-08025 · Security Note
• https://osv.dev/vulnerability/CVE-2026-44115 · Vendor Advisory
• https://github.com/openclaw/openclaw · Note
• https://twitter.com/MBelckadi/status/2055540418394378714 · Twitter Post
• https://twitter.com/brandonbango/status/2055344980835614796 · Twitter Post
• https://reddit.com/r/artificial/comments/1tq0t1g/the_openclaw_crisis_is_the_most_complete_case · Reddit Post
• https://twitter.com/MBelckadi/status/2055539321386778648 · Twitter Post
• https://t.me/cveNotify/162591 · Telegram Post
• https://vulncheck.com/advisories/openclaw-shell-expansion-bypass-in-unquoted-heredocs-via-exec-allowlist · Note
• https://twitter.com/MBelckadi/status/2055545081763881187 · Twitter Post