What is the CVSS score of CVE-2026-32063?

CVE-2026-32063 has a CVSS 3.1 base score of 7.1 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Openclaw are affected by CVE-2026-32063?

OpenClaw versions 2026.2.19-2 through 2026.2.20 contain a command injection vulnerability that could allow attackers to execute arbitrary system commands by manipulating environment variables during…. A patch is available.

How to fix or mitigate CVE-2026-32063?

Within 24 hours: Identify all systems running OpenClaw 2026.2.19-2 through 2026.2.20 and document their business criticality. Within 7 days: Implement input validation controls on environment variable sources and restrict systemd unit file generation to trusted administrative processes only. Within 30 days: Monitor vendor security advisories for patch availability and establish a change management process to deploy the patch immediately upon release.

Openclaw CVE-2026-32063

HIGH

Command Injection (CWE-77)

2026-03-11 disclosure@vulncheck.com

GHSA-vffc-f7r7-rx2w

Command Injection Openclaw

7.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.1 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

High

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

Analysis Generated

Mar 12, 2026 - 22:06 vuln.today

CVE Published

Mar 11, 2026 - 14:16 nvd

HIGH 7.1

DescriptionCVE.org

OpenClaw version 2026.2.19-2 prior to 2026.2.21 contains a command injection vulnerability in systemd unit file generation where attacker-controlled environment values are not validated for CR/LF characters, allowing newline injection to break out of Environment= lines and inject arbitrary systemd directives. An attacker who can influence config.env.vars and trigger service install or restart can execute arbitrary commands with the privileges of the OpenClaw gateway service user.

AnalysisAI

OpenClaw versions prior to 2026.2.21 allow local attackers with limited privileges to inject arbitrary systemd directives through unvalidated environment variables in unit file generation, enabling command execution with gateway service privileges. By manipulating config.env.vars and triggering service installation or restart, an attacker can bypass Environment= line constraints via newline injection to achieve arbitrary code execution. No patch is currently available for this command injection vulnerability.

Technical ContextAI

Classified as CWE-77 (Command Injection). Affects OpenClaw version 2026.2.19-2. OpenClaw version 2026.2.19-2 prior to 2026.2.21 contains a command injection vulnerability in systemd unit file generation where attacker-controlled environment values are not validated for CR/LF characters, allowing newline injection to break out of Environment= lines and inject arbitrary systemd directives. An attacker who can influence config.env.vars and trigger service install or restart can execute arbitrary commands with the privileges of the OpenClaw gateway service user.