What is the CVSS score of CVE-2026-31995?

CVE-2026-31995 has a CVSS 3.1 base score of 5.3 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L. EPSS exploitation probability: 0.1%.

Which versions of Openclaw are affected by CVE-2026-31995?

CVE-2026-31995 presents moderate security risk, a OS command injection vulnerability rated CVSS 5.3. Exploitation could allow attackers to execute code or inject malicious input.. A patch is available.

How to fix or mitigate CVE-2026-31995?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Validate input sanitization for user-controlled parameters.

Openclaw CVE-2026-31995

EUVD-2026-13029 MEDIUM

OS Command Injection (CWE-78)

2026-03-19 VulnCheck

GHSA-fg3m-vhrr-8gj6

Command Injection Microsoft Openclaw Windows

5.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.3 MEDIUM

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

Low

Lifecycle Timeline

EUVD ID Assigned

Mar 19, 2026 - 01:30 euvd

EUVD-2026-13029

Analysis Generated

Mar 19, 2026 - 01:30 vuln.today

Patch released

Mar 19, 2026 - 01:30 nvd

Patch available

CVE Published

Mar 19, 2026 - 01:00 nvd

MEDIUM 5.3

DescriptionCVE.org

OpenClaw versions 2026.1.21 prior to 2026.2.19 contain a command injection vulnerability in the Lobster extension's Windows shell fallback mechanism that allows attackers to inject arbitrary commands through tool-provided arguments. When spawn failures trigger shell fallback with shell: true, attackers can exploit cmd.exe command interpretation to execute malicious commands by controlling workflow arguments.

AnalysisAI

OpenClaw versions prior to 2026.2.19 allow local attackers with limited privileges to execute arbitrary commands through the Lobster extension's Windows shell fallback mechanism by injecting malicious arguments into workflow processes. The vulnerability exploits cmd.exe command interpretation when spawn operations fail and trigger shell execution, enabling command injection with potential impact on system integrity and availability. A patch is available for affected versions.

Technical ContextAI

The vulnerability resides in the Lobster extension component of OpenClaw (CPE: cpe:2.3:a:openclaw:openclaw), which handles tool invocation and argument processing. The root cause is classified as CWE-78 (Improper Neutralization of Special Elements used in an OS Command), a classic command injection flaw. The technical issue occurs in the Windows shell fallback mechanism that activates when initial process spawning attempts fail. When spawn() fails and the code reverts to shell: true execution mode, user-controlled workflow arguments are passed directly to cmd.exe without proper sanitization or escaping. The cmd.exe command interpreter interprets metacharacters such as pipes (|), command separators (&, &&, ||), redirects (>, <), and other shell operators, allowing attackers to break out of the intended command context and execute arbitrary payloads. This is a Windows-specific vulnerability that exploits the difference between direct process execution and shell-mediated execution.

RemediationAI

Upgrade OpenClaw immediately to version 2026.2.19 or later, which includes the fix deployed in commit ba7be018da354ea9f803ed356d20464df0437916 as documented in the vendor repository at https://github.com/openclaw/openclaw/commit/ba7be018da354ea9f803ed356d20464df0437916. For environments unable to patch immediately, implement local access controls to restrict which users can execute OpenClaw workflows and provide workflow arguments, reducing the attack surface to trusted users only. Additionally, review and audit all existing OpenClaw workflows for untrusted argument sources and consider disabling the Lobster extension if it is not actively required. Monitor system logs for cmd.exe spawning with unusual command-line arguments originating from OpenClaw processes.