Openclaw CVE-2026-32058

The CVSS v3.1 score of 2.6 reflects several mitigating factors: Network attack vector (AV:N) is somewhat offset by high attack complexity (AC:H), requirement for local privileges (PR:L), and user interaction (UI:R). The impact is limited to integrity (I:L) with no confidentiality or availability impact. However, the practical risk is context-dependent and potentially underestimated by this numeric score. In approval-workflow-critical environments (CI/CD pipelines, deployment automation, financial systems), this integrity bypass could have outsized impact despite low CVSS. The vulnerability does not appear on the KEV catalog as an actively exploited threat. No public proof-of-concept has been disclosed. The attack requires an attacker to already possess an approval ID and the ability to modify requests before execution, which limits the attack surface to insider threats or post-compromise scenarios. SSVC considerations: Exploitation status is unconfirmed in the wild; the attack requires coordinated action (not fully automatable); technical impact is limited to integrity of specific execution contexts rather than system-wide compromise. Real-world priority depends on whether the organization uses OpenClaw approval workflows for sensitive operations.

An insider with access to OpenClaw approvals (PR:L requirement) identifies a previously approved deployment request with a specific set of environment variables. The attacker obtains the approval ID and, before execution occurs, modifies the environment variables in the request (e.g., changing a database connection string or API endpoint) while keeping the same approval ID. Due to the context-binding weakness, the system executes the modified request as if it were part of the original approval, allowing the attacker to redirect credentials or change deployment targets without generating a new approval audit trail. The high attack complexity (AC:H) reflects that successful exploitation requires precise timing and knowledge of the approval system's execution flow, limiting casual exploitation but remaining feasible for motivated insiders.