Which versions of Openclaw are affected by EUVD-2026-25320?

OpenClaw (npm package) before version 2026.3.31 enables complete workstation compromise for developers who execute it within malicious workspaces, creating a critical attack surface across…. A patch is available.

How to fix or mitigate EUVD-2026-25320?

Within 24 hours, identify all systems running OpenClaw, immediately apply the vendor patch to upgrade to version 2026.3.31 or later, and audit recent .env file modifications for any unauthorized changes. Within 7 days, ensure complete patch coverage across all development machines and CI/CD systems; simultaneously educate developers to avoid executing OpenClaw in untrusted workspace directories. Within 30 days, conduct a full audit of development environment configurations, implement code review procedures for .env changes, and validate that no compromised systems remain.

Openclaw EUVD-2026-25320

Q: What is the CVSS score of EUVD-2026-25320?

EUVD-2026-25320 has a CVSS 4.0 base score of 8.5 (High). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

| CVE-2026-41336 HIGH

Inclusion of Functionality from Untrusted Control Sphere (CWE-829)

2026-04-23 VulnCheck

GHSA-jx3c-247h-cxwp

RCE Openclaw

8.5

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

8.5 HIGH

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Scope

Lifecycle Timeline

Source Code Evidence Fetched

Jul 24, 2026 - 03:29 vuln.today

Analysis Generated

Jul 24, 2026 - 03:29 vuln.today

CVSS changed

Apr 23, 2026 - 22:28 NVD

7.8 (HIGH) 8.5 (HIGH)

EUVD ID Assigned

Apr 23, 2026 - 22:15 euvd

EUVD-2026-25320

Patch released

Apr 23, 2026 - 22:15 nvd

Patch available

CVE Published

Apr 23, 2026 - 21:57 nvd

HIGH 8.5

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

1 npm packages depend on openclaw (1 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.31.

DescriptionCVE.org

OpenClaw before 2026.3.31 allows workspace .env files to override the OPENCLAW_BUNDLED_HOOKS_DIR environment variable, enabling loading of attacker-controlled hook code. Attackers can replace trusted default-on bundled hooks from untrusted workspaces to execute arbitrary code.

AnalysisAI

Arbitrary code execution in OpenClaw before 2026.3.31 (npm package 'openclaw') arises because a workspace-local .env file is allowed to override the OPENCLAW_BUNDLED_HOOKS_DIR environment variable, redirecting the trusted bundled-hooks root to an attacker-controlled directory. Because bundled hooks are default-on and run automatically at startup, a victim who opens or runs OpenClaw inside an untrusted workspace loads and executes attacker-supplied hook code with the user's privileges. There is no public exploit identified at time of analysis and EPSS is negligible (0.01%), but technical impact is total (full C/I/A compromise) and a vendor patch is available.