What is the CVSS score of CVE-2026-32056?

CVE-2026-32056 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Openclaw are affected by CVE-2026-32056?

OpenClaw systems running versions prior to 2026.2.22 are vulnerable to privilege escalation attacks where authenticated users can execute arbitrary code by manipulating shell environment variables.. A patch is available.

Is there a public PoC exploit available for CVE-2026-32056?

Yes, a public proof-of-concept exploit is available for CVE-2026-32056. Prioritise patching immediately. EPSS: 0.2%.

How to fix or mitigate CVE-2026-32056?

Within 24 hours: Identify all systems running OpenClaw versions prior to 2026.2.22 and assess their criticality and exposure. Within 7 days: Apply vendor patch (commit c2c7114ed39a547ab6276e1e933029b9530ee906) to all affected systems, prioritizing production and externally-facing instances. Within 30 days: Complete patching of all remaining systems and conduct log review for signs of exploitation.

Openclaw CVE-2026-32056

EUVD-2026-13958 HIGH

OS Command Injection (CWE-78)

2026-03-21 VulnCheck

GHSA-rj39-33v7-9xrq

GHSA-xgf2-vxv2-rrmg

RCE Command Injection Openclaw

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

PoC Detected

Mar 23, 2026 - 18:59 vuln.today

Public exploit code

EUVD ID Assigned

Mar 21, 2026 - 01:00 euvd

EUVD-2026-13958

Analysis Generated

Mar 21, 2026 - 01:00 vuln.today

Patch released

Mar 21, 2026 - 01:00 nvd

Patch available

CVE Published

Mar 21, 2026 - 00:42 nvd

HIGH 7.5

DescriptionCVE.org

OpenClaw versions prior to 2026.2.22 fail to sanitize shell startup environment variables HOME and ZDOTDIR in the system.run function, allowing attackers to bypass command allowlist protections. Remote attackers can inject malicious startup files such as .bash_profile or .zshenv to achieve arbitrary code execution before allowlist-evaluated commands are executed.

AnalysisAI

OpenClaw versions prior to 2026.2.22 contain a shell environment variable injection vulnerability in the system.run function that allows attackers to bypass command allowlist protections. Authenticated remote attackers with low privileges can inject malicious shell startup files (.bash_profile, .zshenv) via unsanitized HOME and ZDOTDIR variables to achieve arbitrary code execution before allowlisted commands execute. A patch is available from the vendor via GitHub commit c2c7114ed39a547ab6276e1e933029b9530ee906.

Technical ContextAI

The vulnerability affects OpenClaw (cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*), specifically the system.run function which executes shell commands. This is a classic CWE-78 (Improper Neutralization of Special Elements used in an OS Command) vulnerability where shell environment variables HOME and ZDOTDIR are not sanitized before spawning shell processes. Unix shells read configuration files from paths specified by these variables during startup, executing any code within them before the actual command runs. By controlling these variables, attackers can point the shell to attacker-controlled directories containing malicious .bash_profile, .bashrc, .zshenv, or similar startup files, effectively bypassing any command allowlist checks that only examine the command string itself.

RemediationAI

Upgrade OpenClaw to version 2026.2.22 or later, which contains the fix for environment variable sanitization in the system.run function (see patch at https://github.com/openclaw/openclaw/commit/c2c7114ed39a547ab6276e1e933029b9530ee906 and security advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-xgf2-vxv2-rrmg). Until patching is complete, implement compensating controls such as restricting network access to OpenClaw instances to trusted IP ranges only, limiting user privileges to minimize the pool of potential attackers who meet the PR:L requirement, and if possible, avoiding the system.run function entirely or implementing additional input validation that blocks manipulation of HOME and ZDOTDIR variables. Review logs for suspicious environment variable manipulation attempts targeting shell startup file paths.