What is the CVSS score of CVE-2026-32909?

CVE-2026-32909 has a CVSS 3.1 base score of 3.6 (Low). CVSS vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N.

Which versions of Openclaw are affected by CVE-2026-32909?

CVE-2026-32909 is a low-severity vulnerability in OpenClaw before 2026.2.19 (CVSS 3.6).. A patch is available.

How to fix or mitigate CVE-2026-32909?

During next maintenance window: Apply vendor patches when convenient. Vendor patch is available.

Openclaw CVE-2026-32909

EUVD-2026-14591 LOW

OS Command Injection (CWE-78)

2026-03-23 VulnCheck

GHSA-cvxf-wh5g-9qwh

Command Injection Openclaw

3.6

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

3.6 LOW

AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

EUVD ID Assigned

Mar 23, 2026 - 22:00 euvd

EUVD-2026-14591

Analysis Generated

Mar 23, 2026 - 22:00 vuln.today

Patch released

Mar 23, 2026 - 22:00 nvd

Patch available

CVE Published

Mar 23, 2026 - 21:36 nvd

LOW 3.6

DescriptionCVE.org

OpenClaw before 2026.2.19 contains a command injection vulnerability in tools.exec.safeBins that allows attackers to bypass stdin-only restrictions using sort output flags or recursive grep flags. Attackers can exploit this to perform arbitrary file writes via sort -o or recursive file reads via grep -R, circumventing intended safe-bin execution restrictions.

AnalysisAI

OpenClaw before version 2026.2.19 contains a command injection vulnerability in the tools.exec.safeBins function that allows local attackers with limited privileges to bypass stdin-only execution restrictions through specially crafted sort output flags (sort -o) or recursive grep flags (grep -R). An authenticated attacker can exploit this to perform arbitrary file writes or reads, circumventing the intended safe-bin execution model that restricts command capabilities. A patch is available from the vendor, and this vulnerability has been documented by VulnCheck with supporting technical details.

Technical ContextAI

The vulnerability exists in OpenClaw's safe binary execution wrapper (tools.exec.safeBins), which is designed to restrict command execution to stdin-only operations to prevent unauthorized file access or modification. The root cause is a command injection flaw (CWE-78) where the wrapper fails to properly sanitize or validate command-line arguments before passing them to underlying utilities. Specifically, the sort utility's -o flag (output redirection) and grep's -R flag (recursive directory traversal) are not blocked, allowing attackers to bypass the intended restrictions. OpenClaw (affected CPE: cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*) uses this mechanism to control what file operations untrusted or restricted processes can perform, but the inadequate argument validation undermines this security boundary.

RemediationAI

Upgrade OpenClaw to version 2026.2.19 or later, which includes the vendor's patch that properly validates command-line arguments to block dangerous flags like sort -o and grep -R. The patch is available at https://github.com/openclaw/openclaw/commit/2c05cbb43e48ebad03626d3125746fb1b9a8520f. Until patching is possible, organizations should restrict local system access to trusted users only, implement application-level controls to monitor and log execution of sort and grep commands with suspicious arguments, and consider using AppArmor, SELinux, or similar mandatory access controls to restrict file write access from processes running under the affected safe-bin wrapper.