PT-2026-6548 · Openclaw · Openclaw

Hackerman70000 · Published 2026-02-04 · Updated 2026-03-11 · CVE-2026-25593

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.1.20

Description An unauthenticated local client could leverage the Gateway WebSocket API to modify configuration settings through the config.apply function. Specifically, the ability to set unsafe cliPath values, which are subsequently used for command discovery, allows for command injection with the privileges of the gateway user. The config.apply function accepted raw JSON and wrote it to disk after schema validation. The cliPath values were not restricted to safe executable names or paths. Command discovery utilized a shell invocation when resolving executables.

Recommendations Upgrade to version 2026.1.20 or later. If an immediate upgrade is not possible, enable gateway.auth and avoid using custom cliPath values.

Exploit

Fix

Missing Authentication

OS Command Injection

RCE

Weakness Enumeration

CWE-306

CWE-78

CWE-20

Related Identifiers

CVE-2026-25593

GHSA-G55J-C2V4-PJCG

Affected Products

Openclaw

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25593.json · Exploit
• https://github.com/openclaw/openclaw/security/advisories/GHSA-g55j-c2v4-pjcg · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-25593 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-g55j-c2v4-pjcg · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-25593 · Security Note
• https://github.com/openclaw/openclaw · Note
• https://twitter.com/VulmonFeeds/status/2024581571244650835 · Twitter Post
• https://twitter.com/CVEnew/status/2019885534190137463 · Twitter Post
• https://twitter.com/AIContextWindow/status/2028414385576923433 · Twitter Post
• https://reddit.com/r/better_claw/comments/1rqqyeg/every_openclaw_security_incident_on_one_timeline · Reddit Post
• https://twitter.com/henry_gg08/status/2024381030233493975 · Twitter Post
• https://twitter.com/CoyoteSecure/status/2022786173551415375 · Twitter Post