What is the CVSS score of CVE-2026-24763?

CVE-2026-24763 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Docker are affected by CVE-2026-24763?

OpenClaw users face a command injection vulnerability in the Docker sandbox that could allow attackers to execute arbitrary code on affected systems.. A patch is available.

How to fix or mitigate CVE-2026-24763?

Within 24 hours: Identify all systems running OpenClaw versions prior to 2026.1.29 and isolate them from sensitive networks if patching cannot be immediately applied. Within 7 days: Deploy vendor patch 2026.1.29 or later across all affected OpenClaw installations and verify successful deployment. Within 30 days: Conduct post-patch validation testing and review Docker sandbox execution logs for any suspicious activity prior to the patch date.

Docker CVE-2026-24763

HIGH

OS Command Injection (CWE-78)

2026-02-02 security-advisories@github.com

GHSA-mc68-q9jw-2h3v

Docker Command Injection AI / ML Openclaw

8.8

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:01 vuln.today

Patch released

Feb 13, 2026 - 14:28 nvd

Patch available

CVE Published

Feb 02, 2026 - 23:16 nvd

HIGH 8.8

DescriptionGitHub Advisory

OpenClaw (formerly Clawdbot) is a personal AI assistant you run on your own devices. Prior to 2026.1.29, a command injection vulnerability existed in OpenClaw’s Docker sandbox execution mechanism due to unsafe handling of the PATH environment variable when constructing shell commands. An authenticated user able to control environment variables could influence command execution within the container context. This vulnerability is fixed in 2026.1.29.

AnalysisAI

Command injection in OpenClaw's Docker sandbox execution allows authenticated users to manipulate the PATH environment variable and execute arbitrary commands within containers prior to version 2026.1.29. An attacker with valid credentials and ability to control environment variables could achieve code execution within the containerized AI assistant. A patch is available in version 2026.1.29 and later.

Technical ContextAI

Classified as CWE-78 (OS Command Injection). Affects Openclaw. OpenClaw (formerly Clawdbot) is a personal AI assistant you run on your own devices. Prior to 2026.1.29, a command injection vulnerability existed in OpenClaw’s Docker sandbox execution mechanism due to unsafe handling of the PATH environment variable when constructing shell commands. An authenticated user able to control environment variables could influence command execution within the container context. This vulnerability is fixed in 2026.1.29.