What is the CVSS score of CVE-2026-32010?

CVE-2026-32010 has a CVSS 3.1 base score of 6.3 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Openclaw are affected by CVE-2026-32010?

CVE-2026-32010 presents moderate security risk, a OS command injection vulnerability rated CVSS 6.3. Exploitation could allow attackers to execute code or inject malicious input.. A patch is available.

How to fix or mitigate CVE-2026-32010?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Validate input sanitization for user-controlled parameters.

Openclaw CVE-2026-32010

MEDIUM

OS Command Injection (CWE-78)

2026-03-19 disclosure@vulncheck.com

GHSA-4gc7-qcvf-38wg

Command Injection Openclaw

6.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.3 MEDIUM

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

High

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

Analysis Generated

Mar 19, 2026 - 22:30 vuln.today

CVE Published

Mar 19, 2026 - 22:16 nvd

MEDIUM 6.3

DescriptionCVE.org

OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in the safe-bin configuration when sort is manually added to tools.exec.safeBins. Attackers can invoke sort with the --compress-program flag to execute arbitrary external programs without operator approval in allowlist mode with ask=on-miss enabled.

AnalysisAI

OpenClaw versions before 2026.2.22 allow local authenticated attackers to bypass the safe-bin allowlist by exploiting sort's --compress-program flag, enabling execution of arbitrary programs despite allowlist restrictions. This command injection vulnerability affects deployments using safe-bin configuration with ask=on-miss mode enabled, permitting unauthorized code execution without operator approval.

Technical ContextAI

OpenClaw is a command execution framework that implements allowlist-based access controls through its safe-bin configuration in tools.exec.safeBins. The vulnerability exploits a design flaw in argument validation where auxiliary flags passed to whitelisted binaries are not properly sanitized. The sort utility's --compress-program parameter accepts arbitrary external program paths, providing a secondary execution vector that bypasses the primary allowlist check. This represents a classic command injection vulnerability (CWE-78: Improper Neutralization of Special Elements used in an OS Command) where trusted binaries are weaponized to launch unvetted code. The root cause is insufficient parameter filtering on allowlisted executables, failing to restrict dangerous flag combinations that enable code execution through indirect means.

RemediationAI

Upgrade OpenClaw to version 2026.2.22 or later immediately, as this version contains the security patch for the allowlist bypass. The patch can be obtained from the official OpenClaw repository at https://github.com/openclaw/openclaw/security/advisories/GHSA-4gc7-qcvf-38wg. As a temporary mitigation for systems unable to patch immediately, remove sort from the tools.exec.safeBins allowlist unless absolutely required for operations, or disable ask=on-miss mode to require explicit operator approval for all sort executions. Organizations should audit their current safe-bin configurations to identify other potentially dangerous flag combinations in whitelisted utilities and implement stricter argument validation policies at the framework level. Review the VulnCheck advisory at https://www.vulncheck.com/advisories/openclaw-allowlist-bypass-via-sort-compress-program-parameter for additional context and detection guidance.