What is the CVSS score of EUVD-2026-13037?

EUVD-2026-13037 has a CVSS 3.1 base score of 6.3 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Openclaw are affected by EUVD-2026-13037?

CVE-2026-31999 presents moderate security risk, a OS command injection vulnerability rated CVSS 6.3. Exploitation could allow attackers to execute code or inject malicious input.. A patch is available.

How to fix or mitigate EUVD-2026-13037?

Within 30 days: Identify affected systems running a current working directory injection vulnerability in wrapp and apply vendor patches as part of regular patch cycle. Validate input sanitization for user-controlled parameters.

Openclaw EUVD-2026-13037

| CVE-2026-31999 MEDIUM

OS Command Injection (CWE-78)

2026-03-19 VulnCheck

GHSA-6f6j-wx9w-ff4j

Command Injection Microsoft Openclaw Windows

6.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.3 MEDIUM

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

High

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

EUVD ID Assigned

Mar 19, 2026 - 01:30 euvd

EUVD-2026-13037

Analysis Generated

Mar 19, 2026 - 01:30 vuln.today

CVE Published

Mar 19, 2026 - 01:00 nvd

MEDIUM 6.3

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

2 npm packages depend on openclaw (2 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.2.26.

DescriptionCVE.org

OpenClaw versions 2026.2.26 prior to 2026.3.1 on Windows contain a current working directory injection vulnerability in wrapper resolution for .cmd/.bat files that allows attackers to influence execution behavior through cwd manipulation. Remote attackers can exploit improper shell execution fallback mechanisms to achieve command execution integrity loss by controlling the current working directory during wrapper resolution.

AnalysisAI

OpenClaw versions prior to 2026.3.1 contain a current working directory (cwd) injection vulnerability in Windows wrapper resolution for .cmd/.bat files that allows local attackers to manipulate command execution through directory control during shell fallback mechanisms. An authenticated local attacker with low privileges can exploit this vulnerability to achieve command execution integrity loss by controlling the working directory, potentially leading to unauthorized code execution or privilege escalation. While no active in-the-wild exploitation has been reported in KEV databases, the vulnerability is documented with a proof-of-concept available through the vendor's security advisory on GitHub.

Technical ContextAI

The vulnerability stems from improper handling of shell execution fallback mechanisms when OpenClaw resolves .cmd and .bat file wrappers on Windows systems. The root cause is classified under CWE-78 (Improper Neutralization of Special Elements used in an OS Command), which describes inadequate sanitization of user-controlled input before passing it to OS command execution functions. The affected technology involves OpenClaw's wrapper resolution system, which falls back to shell execution (.cmd/.bat handling) without properly validating or isolating the current working directory. When an attacker controls the cwd during this resolution phase, they can influence which files are loaded or executed, bypassing intended execution paths. This is specific to Windows environments where shell wrapper resolution differs from Unix-like systems, and the vulnerability is confirmed to affect OpenClaw (CPE: cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*) versions 2026.2.26 through versions prior to 2026.3.1.

RemediationAI

Upgrade OpenClaw to version 2026.3.1 or later immediately to patch the current working directory injection vulnerability. The vendor has released patched versions that properly sanitize cwd handling in wrapper resolution for .cmd/.bat files; consult the GitHub security advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-6f6j-wx9w-ff4j for detailed upgrade instructions specific to your deployment environment. Until patching is feasible, implement compensating controls by restricting local system access to trusted users only, isolating OpenClaw execution to dedicated non-shared directories with restricted permissions, and monitoring process execution logs for suspicious wrapper resolution behavior. On Windows systems, leverage AppLocker or similar mechanisms to restrict which processes can execute .cmd and .bat files, and enforce principle of least privilege for all accounts running OpenClaw services.