CVE-2026-32003

MEDIUM SEVERITY

CVSS Score & Metrics

Base Score

6.6 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H                                    

Vulnerability Description

OpenClaw versions prior to 2026.2.22 contain an environment variable injection vulnerability in the system.run function that allows attackers to bypass command allowlist restrictions via SHELLOPTS and PS4 environment variables. An attacker who can invoke system.run with request-scoped environment variables can execute arbitrary shell commands outside the intended allowlisted command body through bash xtrace expansion.

Vulnerability Details

Published Date

March 19, 2026

Last Modified

March 23, 2026

CWE ID

CWE-78

Source

NVD

Vendor

OpenClaw

Product

OpenClaw

External References

https://github.com/openclaw/openclaw/commit/e80c803fa887f9699ad87a9e906ab5c1ff85bd9a
https://github.com/openclaw/openclaw/security/advisories/GHSA-2fgq-7j6h-9rm4
https://www.vulncheck.com/advisories/openclaw-remote-code-execution-via-shellopts-ps4-environment-injection-in-system-run

CVE-2026-32003

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment