What is the CVSS score of EUVD-2026-13025?

EUVD-2026-13025 has a CVSS 3.1 base score of 4.8 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:L. EPSS exploitation probability: 0.0%.

Which versions of Openclaw are affected by EUVD-2026-13025?

CVE-2026-31993 presents moderate security risk rated CVSS 4.8. Exploitation could compromise the security of affected deployments.. A patch is available.

How to fix or mitigate EUVD-2026-13025?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Vendor patch is available.

Openclaw EUVD-2026-13025

| CVE-2026-31993 MEDIUM

Incomplete List of Disallowed Inputs (CWE-184)

2026-03-19 VulnCheck

GHSA-5f9p-f3w2-fwch

Apple Authentication Bypass Openclaw macOS

4.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

4.8 MEDIUM

AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:L

Attack Vector

Network

Attack Complexity

High

Privileges Required

High

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

Low

Lifecycle Timeline

EUVD ID Assigned

Mar 19, 2026 - 01:30 euvd

EUVD-2026-13025

Analysis Generated

Mar 19, 2026 - 01:30 vuln.today

Patch released

Mar 19, 2026 - 01:30 nvd

Patch available

CVE Published

Mar 19, 2026 - 01:00 nvd

MEDIUM 4.8

DescriptionCVE.org

OpenClaw versions prior to 2026.2.22 contain an allowlist parsing mismatch vulnerability in the macOS companion app that allows authenticated operators to bypass exec approval checks. Attackers with operator.write privileges and a paired macOS beta node can craft shell-chain payloads that pass incomplete allowlist validation and execute arbitrary commands on the paired host.

AnalysisAI

OpenClaw versions before 2026.2.22 contain an allowlist parsing flaw in the macOS companion app that enables authenticated operators with elevated privileges to bypass command execution controls and run arbitrary commands on paired hosts. The vulnerability affects systems with operator.write access and macOS beta nodes, allowing attackers to craft malicious shell-chain payloads that circumvent validation checks. A security patch is available.

Technical ContextAI

The vulnerability resides in OpenClaw's macOS companion application (cpe:2.3:a:openclaw:openclaw), specifically in the allowlist parsing logic used to validate and approve shell command execution chains. The root cause is classified under CWE-184 (Incomplete List of Disallowed Inputs / Allowlist Bypass), indicating that the application's filtering mechanism fails to account for certain payload patterns or encoding variations when validating commands against its security allowlist. The macOS beta node architecture creates a paired trust model where the companion app is expected to enforce execution policies; the parsing mismatch allows attackers to craft polyglot or obfuscated shell chains that pass validation despite containing unauthorized commands. This is a logic flaw rather than a memory safety issue, meaning it occurs at the policy enforcement layer during command parsing and validation.

RemediationAI

Upgrade OpenClaw immediately to version 2026.2.22 or later, which includes the allowlist parsing fixes referenced in the vendor commits. Organizations unable to patch immediately should restrict operator.write privilege assignments to only trusted personnel, disable or isolate macOS beta node deployments if not operationally critical, and implement network segmentation to limit authenticated access to the OpenClaw management interface. Review audit logs for any suspicious shell-chain command attempts from operator accounts, and consider implementing additional shell command filtering at the host OS level (e.g., via osquery or Security Framework hooks on macOS) as a compensating control. For detailed patching guidance and configuration hardening recommendations, consult the GitHub security advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-5f9p-f3w2-fwch and the VulnCheck advisory at https://www.vulncheck.com/advisories/openclaw-allowlist-parsing-mismatch-in-system-run-shell-chains.