Which versions of Openclaw are affected by EUVD-2026-13013?

CVE-2026-28460 presents moderate security risk, a OS command injection vulnerability rated CVSS 6.0. Exploitation could allow attackers to execute code or inject malicious input.. A patch is available.

How to fix or mitigate EUVD-2026-13013?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Validate input sanitization for user-controlled parameters.

Openclaw EUVD-2026-13013

Q: What is the CVSS score of EUVD-2026-13013?

EUVD-2026-13013 has a CVSS 4.0 base score of 6.0 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

| CVE-2026-28460 MEDIUM

OS Command Injection (CWE-78)

2026-03-19 VulnCheck

GHSA-9868-vxmx-w862

Command Injection Openclaw

6.0

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

6.0 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

EUVD ID Assigned

Mar 19, 2026 - 01:30 euvd

EUVD-2026-13013

Analysis Generated

Mar 19, 2026 - 01:30 vuln.today

Patch released

Mar 19, 2026 - 01:30 nvd

Patch available

CVE Published

Mar 19, 2026 - 01:00 nvd

MEDIUM 6.0

DescriptionCVE.org

OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in system.run that allows attackers to execute non-allowlisted commands by splitting command substitution using shell line-continuation characters. Attackers can bypass security analysis by injecting $\\ followed by a newline and opening parenthesis inside double quotes, causing the shell to fold the line continuation into executable command substitution that circumvents approval boundaries.

AnalysisAI

OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in the system.run function that allows authenticated attackers to execute non-allowlisted commands by exploiting shell line-continuation characters to fold malicious command substitution past security controls. An attacker with low privileges (PR:L) can inject shell metacharacters (specifically $\ followed by newline and parenthesis within double quotes) to circumvent approval boundaries and execute arbitrary commands, resulting in integrity compromise and potential availability impact. A public advisory and patch are available from the vendor, though no EPSS score or KEV status was provided in the intelligence sources.

Technical ContextAI

The vulnerability exists in OpenClaw's system.run command execution function, which implements an allowlist to restrict which commands can be executed. The root cause is improper input validation and shell metacharacter handling, classified under CWE-78 (Improper Neutralization of Special Elements used in an OS Command), a classic command injection weakness. The attack exploits bash/sh line-continuation semantics where a backslash followed by a newline is treated as line folding, allowing an attacker to split a single logical command across multiple lines within quoted strings. By injecting the sequence $\ (dollar sign followed by backslash) followed by a literal newline and opening parenthesis inside double quotes, the shell interprets this as command substitution that bypasses static analysis of the allowlist check. This occurs because the security validation likely operates on the raw, pre-expansion string without accounting for shell metacharacter folding behavior. The affected product is identified via CPE cpe:2.3:a:openclaw:openclaw, indicating all versions before 2026.2.22 are vulnerable.

RemediationAI

Upgrade OpenClaw to version 2026.2.22 or later immediately. The vendor has published a patch available at https://github.com/openclaw/openclaw/commit/3f0b9dbb36c86e308267924c0d3d4a4e1fc4d1e9 and full remediation guidance in the GitHub Security Advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-9868-vxmx-w862. Until patching is completed, apply network-level mitigations by restricting access to OpenClaw's system.run API to trusted authenticated users only, implement additional input validation rules to reject command strings containing shell metacharacters such as backslash-newline sequences, and monitor logs for suspicious command execution attempts. If possible, disable the system.run feature entirely until patching can be completed.