What is the CVSS score of CVE-2026-32901?

CVE-2026-32901 has a CVSS 3.1 base score of 6.7 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H.

Which versions of Openclaw are affected by CVE-2026-32901?

Organizations using OpenClaw before 2026.3.2 should be aware of notable risk from CVE-2026-32901 rated CVSS 6.7. Exploitation could compromise the security of affected deployments.. A patch is available.

How to fix or mitigate CVE-2026-32901?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Vendor patch is available.

Openclaw CVE-2026-32901

EUVD-2026-14580 MEDIUM

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') (CWE-88)

2026-03-23 VulnCheck

GHSA-pvp5-jcrh-24j3

Information Disclosure Openclaw

6.7

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.7 MEDIUM

AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 23, 2026 - 22:00 euvd

EUVD-2026-14580

Analysis Generated

Mar 23, 2026 - 22:00 vuln.today

Patch released

Mar 23, 2026 - 22:00 nvd

Patch available

CVE Published

Mar 23, 2026 - 21:36 nvd

MEDIUM 6.7

DescriptionCVE.org

OpenClaw before 2026.3.2 contains a semantic drift vulnerability in node system.run approval hardening that rewrites wrapper command argv, allowing execution of unintended local scripts. Attackers who can influence wrapper argv and place malicious files in the approved working directory can execute arbitrary scripts by exploiting argv rewriting that changes runtime behavior from approved command text.

AnalysisAI

OpenClaw before version 2026.3.2 contains a semantic drift vulnerability in the node system.run approval hardening mechanism that allows attackers to manipulate wrapper command arguments (argv) to execute unintended local scripts. An attacker with local access, low privileges, and the ability to influence wrapper argv and place malicious files in the approved working directory can achieve arbitrary script execution by exploiting argv rewriting that bypasses the intended approved command enforcement. A patch is available from the vendor, and this vulnerability affects all OpenClaw versions prior to 2026.3.2.

Technical ContextAI

The vulnerability exists in OpenClaw's system.run node approval hardening mechanism, which is designed to restrict command execution by validating and approving specific command invocations. The root cause is classified under CWE-88 (Improper Neutralization of Argument Delimiters in a Command), indicating insufficient sanitization or validation of command-line arguments during the approval process. The flaw involves semantic drift—a discrepancy between what the approval mechanism validates (the original command text) and what actually executes at runtime (the rewritten argv). When the system rewrites wrapper command arguments, the modified argv can diverge from the approved command, allowing an attacker to redirect execution to arbitrary scripts located in the approved working directory. This is a process argument injection flaw affecting the CPE cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:* (all OpenClaw versions prior to remediation).

RemediationAI

Upgrade OpenClaw to version 2026.3.2 or later immediately. The vendor has released a patched version available at https://github.com/openclaw/openclaw/security/advisories/GHSA-h3rm-6x7g-882f. Pending patch deployment, implement compensating controls by restricting file system write permissions in OpenClaw working directories to trusted principals only, disabling user interaction with system.run nodes where possible, and limiting local system access to approved administrators. Conduct a code review of any custom wrapper scripts to ensure argv is handled securely and cannot be rewritten by external influence.