Is there a patch available for CVE-2026-34425?

Yes, a patch is available for CVE-2026-34425. Update the affected software to the latest version immediately.

Openclaw CVE-2026-34425

Q: What is the CVSS score of CVE-2026-34425?

CVE-2026-34425 has a CVSS 4.0 base score of 5.3 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-18490 MEDIUM

Incomplete List of Disallowed Inputs (CWE-184)

2026-04-02 VulnCheck

GHSA-rf75-g96h-j3rm

GHSA-fvx6-pj3r-5q4q

Authentication Bypass Openclaw

5.3

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

5.3 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

EUVD ID Assigned

Apr 02, 2026 - 19:01 euvd

EUVD-2026-18490

Analysis Generated

Apr 02, 2026 - 19:01 vuln.today

Patch released

Apr 02, 2026 - 19:01 nvd

Patch available

CVE Published

Apr 02, 2026 - 18:15 nvd

MEDIUM 5.3

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

5 npm packages depend on openclaw (5 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.4.2.

DescriptionCVE.org

OpenClaw versions prior to commit 8aceaf5 contain a preflight validation bypass vulnerability in shell-bleed protection that allows attackers to execute blocked script content by using piped or complex command forms that the parser fails to recognize. Attackers can craft commands such as piped execution, command substitution, or subshell invocation to bypass the validateScriptFileForShellBleed() validation checks and execute arbitrary script content that would otherwise be blocked.

AnalysisAI

OpenClaw versions prior to commit 8aceaf5 allow authenticated remote attackers to bypass shell-bleed protection validation by crafting complex command forms such as piped execution, command substitution, or subshell invocation, enabling execution of arbitrary script content that should be blocked. The vulnerability affects the validateScriptFileForShellBleed() parser, which fails to recognize obfuscated command structures; no public exploit code has been identified at time of analysis, though a vendor patch is available.

Technical ContextAI

OpenClaw implements shell-bleed protection through a validateScriptFileForShellBleed() validation function designed to prevent execution of dangerous shell commands in script content. The vulnerability exploits a parsing deficiency in this validation mechanism (CWE-184: Incomplete List of Disallowed Inputs) where the parser uses an incomplete or incorrect allowlist/blocklist approach. Attackers can evade this validation by restructuring commands into forms the parser does not recognize-such as piped commands (using |), command substitution (using $()), or subshell invocation (using parentheses)-allowing arbitrary script execution that bypasses the intended security control. The affected product is identified through CPE cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:* and affects all versions prior to the commit hash 8aceaf5d0f0ec552b75a792f7f0a3bfa5b091513.

RemediationAI

Upstream fix available via commit 8aceaf5d0f0ec552b75a792f7f0a3bfa5b091513 on GitHub; users should update to the first tagged release that includes or supersedes this commit. For immediate reference, the patch commit is available at https://github.com/openclaw/openclaw/commit/8aceaf5d0f0ec552b75a792f7f0a3bfa5b091513. Until patching is feasible, restrict authenticated user access to OpenClaw's script execution features to trusted personnel only, and audit any scripts processed through the shell-bleed validator for signs of complex command obfuscation. Consult the vendor advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-fvx6-pj3r-5q4q and https://www.vulncheck.com/advisories/openclaw-shell-bleed-protection-preflight-validation-bypass for configuration guidance.