What is the CVSS score of EUVD-2026-13023?

EUVD-2026-13023 has a CVSS 3.1 base score of 7.1 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L. EPSS exploitation probability: 0.1%.

Which versions of Openclaw are affected by EUVD-2026-13023?

OpenClaw versions prior to 2026.2.23 contain a vulnerability allowing authenticated operators to bypass security controls and execute arbitrary commands on systems.. A patch is available.

How to fix or mitigate EUVD-2026-13023?

Within 24 hours: Inventory all OpenClaw deployments and document current versions in use. Within 7 days: Apply vendor patch 2026.2.23 or later to all affected systems, prioritizing production environments. Within 30 days: Conduct post-patch verification testing and review operator access logs for suspicious command execution activity during the vulnerability window.

Openclaw EUVD-2026-13023

| CVE-2026-31992 HIGH

Incomplete List of Disallowed Inputs (CWE-184)

2026-03-19 VulnCheck

GHSA-48wf-g7cp-gr3m

Authentication Bypass Openclaw

7.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.1 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

Low

Lifecycle Timeline

EUVD ID Assigned

Mar 19, 2026 - 01:30 euvd

EUVD-2026-13023

Analysis Generated

Mar 19, 2026 - 01:30 vuln.today

Patch released

Mar 19, 2026 - 01:30 nvd

Patch available

CVE Published

Mar 19, 2026 - 01:00 nvd

HIGH 7.1

DescriptionCVE.org

OpenClaw versions prior to 2026.2.23 contain an allowlist bypass vulnerability in system.run guardrails that allows authenticated operators to execute unintended commands. When /usr/bin/env is allowlisted, attackers can use env -S to bypass policy analysis and execute shell wrapper payloads at runtime.

AnalysisAI

OpenClaw contains an allowlist bypass vulnerability in system.run guardrails that enables authenticated operators to execute arbitrary commands by exploiting the env -S flag when /usr/bin/env is allowlisted. The vulnerability affects all OpenClaw versions prior to 2026.2.23, allowing attackers with low-level privileges to bypass policy controls and execute shell wrapper payloads at runtime. No KEV status or public POC has been reported, though vendor patches are available.

Technical ContextAI

This vulnerability exploits CWE-184 (Incomplete List of Disallowed Inputs) in OpenClaw's command execution guardrails. The affected product is OpenClaw (cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*), which implements allowlist-based command execution controls. When administrators allowlist /usr/bin/env as a permitted command, attackers can abuse the env utility's -S flag to inject additional commands and shell options that bypass the intended policy analysis. The -S flag allows splitting a single string into multiple arguments at runtime, effectively circumventing the pre-execution security checks that only evaluate the initial command invocation. This represents a classic allowlist evasion pattern where a trusted utility's legitimate features are weaponized to execute unintended payloads.

RemediationAI

Upgrade OpenClaw to version 2026.2.23 or later, which includes patches available in GitHub commits https://github.com/openclaw/openclaw/commit/a1c4bf07c6baad3ef87a0e710fe9aef127b1f606 and https://github.com/openclaw/openclaw/commit/3f923e831364d83d0f23499ee49961de334cf58b. Organizations should review their system.run allowlist configurations and remove /usr/bin/env unless absolutely required, or implement additional validation to block the -S flag and other potentially dangerous env options. As an interim control, restrict operator authentication to highly trusted accounts only and implement comprehensive command execution logging to detect potential exploitation attempts. Consult the vendor security advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-48wf-g7cp-gr3m for complete remediation guidance.