Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.8

OpenClaw before 2026.3.11 allows malicious commands to be executed

CVE-2026-32973 · published 7 months ago
Summary

A security issue in OpenClaw allows attackers to bypass intended restrictions and execute commands or access paths that shouldn't be accessible. This could potentially allow an attacker to run malicious code or access sensitive data. Upgrade to OpenClaw 2026.3.11 or later to fix this issue.

Original advisory text
OpenClaw before 2026.3.11 contains an exec allowlist bypass vulnerability where matchesExecAllowlistPattern improperly normalizes patterns with lowercasing and glob matching that overmatches on POS...
OpenClaw before 2026.3.11 contains an exec allowlist bypass vulnerability where matchesExecAllowlistPattern improperly normalizes patterns with lowercasing and glob matching that overmatches on POSIX paths. Attackers can exploit the ? wildcard matching across path segments to execute commands or paths not intended by operators.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
8.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-625Permissive Regular Expression
Timeline
Published29 Mar 2026
Updated4 Nov 2026
First seen29 Mar 2026
Sources
CVE-2026-32973 · NVD
Track software like this
Free during beta