Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-25157: OpenClaw/Clawdbot allows remote command execution

CVE-2026-25157 · published 9 months ago

Summary

Versions of OpenClaw and Clawdbot before 2026.1.29 let an attacker insert malicious commands when a project path is used in an SSH operation. The flaw can let an attacker run code on the remote server or the local machine. Upgrade to version 2026.1.29 or later to fix the problem.

What to do

Update steipete clawdbot to version 2026.1.29.
Update openclaw openclaw to version 2026.1.29 or later.

Affected software

Ecosystem	Vendor	Product	Affected versions
npm	steipete	clawdbot	< 2026.1.29 Fix: upgrade to 2026.1.29
–	openclaw	openclaw	< 2026.1.29 `cpe:2.3:a:openclaw:openclaw::::::node.js::*`

Original advisory text

OpenClaw/Clawdbot has OS Command Injection via Project Root Path in sshNodeCommand

OpenClaw is a personal AI assistant. Prior to version 2026.1.29, there is an OS command injection vulnerability via the Project Root Path in sshNodeCommand. The sshNodeCommand function constructed a shell script without properly escaping the user-supplied project path in an error message. When the cd command failed, the unescaped path was interpolated directly into an echo statement, allowing arbitrary command execution on the remote SSH host. The parseSSHTarget function did not validate that SSH target strings could not begin with a dash. An attacker-supplied target like -oProxyCommand=... would be interpreted as an SSH configuration flag rather than a hostname, allowing arbitrary command execution on the local machine. This issue has been patched in version 2026.1.29.

References

https://github.com/advisories/GHSA-q284-4pvr-m585
https://nvd.nist.gov/vuln/detail/CVE-2026-25157 Vendor Advisory
https://github.com/openclaw/openclaw/security/advisories/GHSA-q284-4pvr-m585 Vendor Advisory
https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25157... Vendor Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker full control

Severity

7.7 High

Exploitation

1% chance of attack within 30 days

Type

CWE-78OS Command Injection

Timeline

Published4 Feb 2026

Updated31 Oct 2026

First seen6 Mar 2026

Sources

CVE-2026-25157 · NVD

GHSA-q284-4pvr-m585 · GHSA

CVE-2026-25157 · OSV

Track software like this

Free during beta