What is the CVSS score of CVE-2026-32059?

CVE-2026-32059 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Openclaw are affected by CVE-2026-32059?

OpenClaw versions 2026.2.22-2 through 2026.2.23 contain an authorization flaw that could allow attackers to bypass access controls and gain unauthorized access to sensitive functionality or data.. A patch is available.

Openclaw CVE-2026-32059

HIGH

Incorrect Authorization (CWE-863)

2026-03-11 disclosure@vulncheck.com

GHSA-3c6h-g97w-fg78

GHSA-7977-c43c-xpwj

Authentication Bypass Openclaw

8.8

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

Analysis Generated

Mar 12, 2026 - 22:06 vuln.today

CVE Published

Mar 11, 2026 - 14:16 nvd

HIGH 8.8

DescriptionNVD

OpenClaw version 2026.2.22-2 prior to 2026.2.23 tools.exec.safeBins validation for sort command fails to properly validate GNU long-option abbreviations, allowing attackers to bypass denied-flag checks via abbreviated options. Remote attackers can execute sort commands with abbreviated long options to skip approval requirements in allowlist mode.

AnalysisAI

OpenClaw version 2026.2.22-2 versions up to 2026.2.23 is affected by incorrect authorization (CVSS 8.8).

RemediationAI

Within 24 hours: Inventory all systems running OpenClaw 2026.2.22-2 through 2026.2.23 and restrict external access to these instances. Within 7 days: Implement compensating controls including network segmentation and WAF rules to block exploitation attempts. …

Analysis

Detailed AI-generated intelligence summary covering attack vector, impact assessment, affected versions, remediation steps, and indicators of compromise.

POChttps://••••••••••.com/exploit

PATCHhttps://••••••••••.com/patch

ADVISORYhttps://••••••••••.com/advisory

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

CVE-2026-32059 vulnerability details – vuln.today

Back

Openclaw CVE-2026-32059

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

RemediationAI

Full analysis requires sign-in

Share

External POC / Exploit Code