Which versions of Openclaw are affected by CVE-2026-32032?

OpenClaw versions before 2026.2.22 allow attackers with local system access to execute arbitrary commands using the application's privileges through environment variable manipulation.. A patch is available.

How to fix or mitigate CVE-2026-32032?

Within 24 hours: Inventory all OpenClaw deployments and document current versions. Within 7 days: Implement environment variable controls and restrict local access to OpenClaw process accounts; disable OpenClaw if no workaround can be deployed. Within 30 days: Upgrade to OpenClaw 2026.2.22 or later once available, or transition to an alternative solution if no patch timeline is provided by vendor.

Openclaw CVE-2026-32032

Q: What is the CVSS score of CVE-2026-32032?

CVE-2026-32032 has a CVSS 4.0 base score of 7.3 (High). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

HIGH

Untrusted Search Path (CWE-426)

2026-03-19 disclosure@vulncheck.com

GHSA-f8mp-vj46-cq8v

Code Injection Openclaw

7.3

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.3 HIGH

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

Analysis Generated

Mar 19, 2026 - 22:30 vuln.today

CVE Published

Mar 19, 2026 - 22:16 nvd

HIGH 7.3

DescriptionCVE.org

OpenClaw versions prior to 2026.2.22 contain an arbitrary shell execution vulnerability in shell environment fallback that trusts the unvalidated SHELL path from the host environment. An attacker with local environment access can inject a malicious SHELL variable to execute arbitrary commands with the privileges of the OpenClaw process.

AnalysisAI

OpenClaw versions before 2026.2.22 allow local attackers with environment access to execute arbitrary commands by manipulating the SHELL environment variable, which is insufficiently validated during shell fallback operations. An attacker can leverage this to run malicious code with the privileges of the OpenClaw process. No patch is currently available for this vulnerability.

Technical ContextAI

OpenClaw is an open-source reimplementation of the classic Claw game that contains a shell environment fallback mechanism. The vulnerability stems from CWE-426 (Untrusted Search Path), where the application uses the SHELL environment variable from the host system without proper validation or sanitization. When OpenClaw needs to execute shell operations, it relies on this potentially attacker-controlled path, allowing code injection through a malicious SHELL variable that points to an attacker's executable instead of a legitimate shell interpreter.

RemediationAI

Upgrade OpenClaw to version 2026.2.22 or later, which contains the fix in commit 25e89cc86338ef475d26be043aa541dfdb95e52a. The patch properly validates the SHELL environment variable before use. As a temporary workaround until patching is possible, ensure the SHELL environment variable points only to legitimate shell binaries and restrict local access to systems running OpenClaw. Review the official security advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-f8mp-vj46-cq8v for additional details.