What is the CVSS score of CVE-2026-25593?

CVE-2026-25593 has a CVSS 3.1 base score of 8.4 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of AI / ML are affected by CVE-2026-25593?

CVE-2026-25593 affects OpenClaw AI assistants and allows unauthenticated local attackers to inject commands with gateway-level privileges through the WebSocket API.. A patch is available.

How to fix or mitigate CVE-2026-25593?

Within 24 hours: Identify all OpenClaw deployments and document version numbers; isolate affected systems from production networks if feasible. Within 7 days: Implement network segmentation to restrict local access to the Gateway WebSocket API; disable the config.apply functionality if operationally possible; enable enhanced logging of WebSocket API calls. Within 30 days: Upgrade to OpenClaw 2026.1.20 or later when available; conduct forensic analysis for signs of exploitation; review all gateway user activity logs for suspicious command execution.

AI / ML CVE-2026-25593

HIGH

OS Command Injection (CWE-78)

2026-02-06 security-advisories@github.com

GHSA-g55j-c2v4-pjcg

Command Injection AI / ML Openclaw

8.4

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

8.4 HIGH

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Feb 06, 2026 - 21:16 nvd

HIGH 8.4

DescriptionGitHub Advisory

OpenClaw is a personal AI assistant. Prior to 2026.1.20, an unauthenticated local client could use the Gateway WebSocket API to write config via config.apply and set unsafe cliPath values that were later used for command discovery, enabling command injection as the gateway user. This vulnerability is fixed in 2026.1.20.

AnalysisAI

OpenClaw prior to version 2026.1.20 allows local unauthenticated attackers to execute arbitrary commands as the gateway user by exploiting the WebSocket API to inject malicious command paths through the config.apply function. The vulnerability stems from insufficient validation of the cliPath parameter, which is subsequently used for command discovery without proper sanitization. No patch is currently available for affected versions.

Technical ContextAI

Classified as CWE-78 (OS Command Injection). Affects Openclaw. OpenClaw is a personal AI assistant. Prior to 2026.1.20, an unauthenticated local client could use the Gateway WebSocket API to write config via config.apply and set unsafe cliPath values that were later used for command discovery, enabling command injection as the gateway user. This vulnerability is fixed in 2026.1.20.