What is the CVSS score of CVE-2026-28455?

CVE-2026-28455 has a CVSS 3.1 base score of 5.8 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L.

Which versions of Openclaw are affected by CVE-2026-28455?

Organizations using OpenClaw before 2026.2.22 should be aware of moderate risk from CVE-2026-28455, a incorrect authorization vulnerability rated CVSS 5.8.. A patch is available.

How to fix or mitigate CVE-2026-28455?

Within 30 days: Identify affected systems running system.run exec analysis that fails to unwrap env and shell- and apply vendor patches as part of regular patch cycle. Vendor patch is available.

Openclaw CVE-2026-28455

EUVD-2026-14559 MEDIUM

Incorrect Authorization (CWE-863)

2026-03-23 VulnCheck

GHSA-8px9-wr67-9w6f

Authentication Bypass Openclaw

5.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.8 MEDIUM

AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

High

Availability

Low

Lifecycle Timeline

EUVD ID Assigned

Mar 23, 2026 - 22:00 euvd

EUVD-2026-14559

Analysis Generated

Mar 23, 2026 - 22:00 vuln.today

Patch released

Mar 23, 2026 - 22:00 nvd

Patch available

CVE Published

Mar 23, 2026 - 21:36 nvd

MEDIUM 5.8

DescriptionCVE.org

OpenClaw before 2026.2.22 contains an allowlist bypass vulnerability in system.run exec analysis that fails to unwrap env and shell-dispatch wrapper chains. Attackers can route execution through wrapper binaries like env bash to smuggle payloads and bypass intended allowlist restrictions.

AnalysisAI

OpenClaw before version 2026.2.22 contains an allowlist bypass vulnerability in its system.run exec analysis functionality that fails to properly unwrap environment variable and shell-dispatch wrapper chains. Attackers with local access and limited privileges can exploit this to route command execution through wrapper binaries such as env or bash, allowing them to smuggle payloads past the intended allowlist restrictions. This vulnerability enables privilege escalation and integrity compromise on affected systems.

Technical ContextAI

The vulnerability exists in OpenClaw's exec analysis module, which implements a command allowlist to restrict what system commands can be executed. The root cause, classified as CWE-863 (Incorrect Authorization), stems from inadequate validation logic that fails to recursively unwrap indirect command invocation chains. When a user attempts to execute a restricted command, the system checks the direct command against the allowlist but does not account for wrapper binaries like env or shell-dispatch that can be used to indirectly invoke restricted commands. An attacker can chain these wrappers to obfuscate the true execution path, bypassing the allowlist check entirely. The affected product is OpenClaw (CPE: cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*), and all versions prior to 2026.2.22 are vulnerable to this authorization bypass.

RemediationAI

Upgrade OpenClaw to version 2026.2.22 or later immediately. The vendor has released a patch available at https://github.com/openclaw/openclaw/commit/2b63592be57782c8946e521bc81286933f0f99c7 which can be incorporated into your deployment. Until patching is feasible, restrict local access to systems running OpenClaw by limiting user accounts with exec permissions, implement additional network segmentation to reduce the attack surface, and monitor system.run exec calls for suspicious wrapper binary usage patterns (env, bash, sh invocations). Organizations should prioritize patching given the ease of exploitation by local users.