What is the CVSS score of CVE-2026-28363?

CVE-2026-28363 has a CVSS 3.1 base score of 9.9 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Openclaw are affected by CVE-2026-28363?

CVE-2026-28363 is a critical vulnerability in OpenClaw that allows attackers to execute arbitrary commands without proper authorization by bypassing security validation controls.. A patch is available.

How to fix or mitigate CVE-2026-28363?

Within 24 hours: Inventory all OpenClaw deployments and confirm versions; disable or restrict access to the sort tool functionality if possible. Within 7 days: Implement network segmentation to limit OpenClaw's lateral movement capability and enable detailed logging/monitoring of all tool execution requests. Within 30 days: Contact vendor for patch timeline; if patch becomes available, prioritize deployment; if not, evaluate alternative tools or implement strict input validation proxies in front of OpenClaw instances.

Openclaw CVE-2026-28363

CRITICAL

Incomplete List of Disallowed Inputs (CWE-184)

2026-02-27 cve@mitre.org

GHSA-3c6h-g97w-fg78

GHSA-7977-c43c-xpwj

Authentication Bypass Privilege Escalation Openclaw

9.9

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

9.9 CRITICAL

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Feb 27, 2026 - 04:16 nvd

CRITICAL 9.9

DescriptionCVE.org

In OpenClaw before 2026.2.23, tools.exec.safeBins validation for sort could be bypassed via GNU long-option abbreviations (such as --compress-prog) in allowlist mode, leading to approval-free execution paths that were intended to require approval. Only an exact string such as --compress-program was denied.

AnalysisAI

Validation bypass in OpenClaw tools.exec.safeBins allows shell command execution through GNU long-option abbreviation. Attackers can abuse the 'sort' binary whitelist entry to execute arbitrary commands via abbreviated flags. CVSS 9.9.

Technical ContextAI

CWE-184 incomplete denylist. The safeBins validation for 'sort' can be bypassed using GNU's long-option abbreviation feature (e.g., --output can be abbreviated), allowing execution of unintended operations.