EUVD-2026-21436
GHSA-m3mh-3mpg-37hw
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessCraft malicious .npmrc file with git executable override
-
DeliveryPlace file in staged package directory
-
ExploitTrigger npm install execution
-
ExecutionGit dependency resolution invokes attacker-controlled program
-
ImpactExecute arbitrary code locally
Vulnerability Assessment
| Weakness |
CWE
ASVS 5.0
V4 - API and Web Service Acceptance of extraneous untrusted data
|
| Exploitation Conditions | Local attacker must place a malicious .npmrc file in the staged package directory before npm install execution in OpenClaw versions before 2026.3.24. Requires user interaction to trigger npm install. Victim must execute npm install in a directory containing the attacker-controlled .npmrc with git executable override. |
| Impact | Local code execution vulnerability affecting OpenClaw plugin/hook installation. Attack requires user interaction (opening malicious .npmrc in staged directory) and local access, limiting blast radius to developers. High impact (code execution, data exfiltration, system compromise) justifies patching despite authentication and complexity barriers. EPSS data unavailable; prioritize based on development environment exposure. |
| Exploit ScenarioDerived | Attacker places crafted .npmrc file in target directory with git executable override. When developer runs npm install for plugins/hooks, git dependency resolution executes attacker-specified program. No public exploit code confirmed; attack requires social engineering or repository compromise. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Apr 10, 2026
Arbitrary code execution in OpenClaw versions prior to 2026.3.24 enables local attackers to execute malicious code during npm package installation by crafting a malicious .npmrc file that overrides the git executable. When npm install runs in the staged package directory with git dependencies, the attacker-controlled .npmrc configuration triggers execution of arbitrary programs specified by the attacker. Exploitation requires user interaction to install the malicious plugin or hook locally. No public exploit identified at time of analysis.
RemediationAI
Vendor-released patch: upgrade to OpenClaw version 2026.3.24 or later, which addresses the arbitrary code execution vulnerability in npm configuration handling. Until patching is feasible, implement strict controls on plugin and hook installation sources: only install from verified, trusted repositories and avoid installing plugins from untrusted or third-party sources. Conduct manual inspection of package contents, specifically .npmrc files, before local installation. Disable or restrict local plugin installation functionality if not operationally required. Detailed security advisory available at https://github.com/openclaw/openclaw/security/advisories/GHSA-m3mh-3mpg-37hw. Additional technical analysis: https://www.vulncheck.com/advisories/openclaw-arbitrary-code-execution-via-npmrc-in-local-plugin-hook-installation
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in npm
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
CWE-349 (Acceptance of Extraneous Untrusted Data With Trusted Data) vulnerability exploits npm's configuration hierarchy during local plugin installation. Attacker-supplied .npmrc files in staged directories override git executable paths, enabling arbitrary command execution when npm resolves git-based dependencies. The vulnerability stems from insufficient validation of configuration files within untrusted package contexts during the installation workflow.
Know when Openclaw gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
2DescriptionCVE.org
OpenClaw before 2026.3.24 contains an arbitrary code execution vulnerability in local plugin and hook installation that allows attackers to execute malicious code by crafting a .npmrc file with a git executable override. During npm install execution in the staged package directory, attackers can leverage git dependencies to trigger execution of arbitrary programs specified in the attacker-controlled .npmrc configuration file.
Blast Radius
ecosystem impact- 3 npm packages depend on openclaw (3 direct, 0 indirect)
Ecosystem-wide dependent count for version 2026.3.24.
Executive ViewAI
CVE-2026-35641 affects OpenClaw versions before 2026.3.24 and allows local attackers to execute arbitrary code during npm package installation through malicious .npmrc file configuration. Development teams and build systems using affected OpenClaw versions face risk of code execution when installing packages with git dependencies, potentially compromising development environments and supply chain integrity.
No vendor-released patch identified at time of analysis. Interim mitigations: (1) Restrict npm install execution to sandboxed or isolated build environments; (2) Implement file integrity monitoring on .npmrc files in project directories; (3) Use npm audit and supply chain scanning tools to detect suspicious package configurations; (4) Enforce code review of all .npmrc modifications; (5) Disable automatic git dependency resolution where possible and use pinned package versions instead.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Remote Code Execution represents the critical moment when an attacker successfully runs arbitrary code on a target system without physical access.
Related Vulnerabilities in OpenClaw Multiple Authorization and Privilege Escalation
View all 29Auth bypass in OpenClaw voice-call extension before 2026.2.1. EPSS 0.68%. PoC and patch available.
Privilege escalation in OpenClaw (pre-2026.3.28) allows unauthenticated remote attackers to gain administrative access b
OpenClaw versions 2026.2.22 through 2026.2.24 contain a privilege escalation vulnerability that allows authenticated att
An authorization mismatch vulnerability in OpenClaw versions prior to 2026.3.1 allows authenticated users with operator.
OpenClaw versions prior to 2026.1.29 automatically establish WebSocket connections to attacker-controlled gateway URLs e
Path traversal in OpenClaw through version 2026.3.23 enables unauthenticated remote attackers to read arbitrary files in
Directory-context bypass in OpenClaw before 2026.8.1 allows authenticated attackers with user interaction to reuse an 'a
Unauthenticated access to the noVNC observer interface in OpenClaw's Docker sandbox browser allows anyone who can reach
OpenClaw versions before 2026.2.26 allow authenticated attackers to write arbitrary files outside the workspace director
OpenClaw versions prior to 2026.2.22 contain a shell environment variable injection vulnerability in the system.run func
OpenClaw versions prior to 2026.2.22 contain a resource exhaustion vulnerability where the application fails to consiste
OpenClaw versions prior to 2026.3.1 contain a sandbox escape vulnerability that allows authenticated attackers with low
Exploit-DB