CVE-2026-32032
Arbitrary Shell Execution in OpenClaw via Unvalidated SHELL Variable
Publication date: 2026-03-19
Last updated on: 2026-03-25
Assigner: VulnCheck
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| openclaw | openclaw | to 2026.2.22 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-426 | The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in OpenClaw versions prior to 2026.2.22 and involves an arbitrary shell execution issue. It occurs because the software's shell environment fallback trusts the SHELL path from the host environment without validating it. An attacker who has local access to the environment can set a malicious SHELL variable, which leads to the execution of arbitrary commands with the same privileges as the OpenClaw process.
How can this vulnerability impact me? :
The impact of this vulnerability is that an attacker with local environment access can execute arbitrary commands on the system with the privileges of the OpenClaw process. This can lead to unauthorized actions such as data modification, data deletion, or further system compromise depending on the privileges of the OpenClaw process.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
How can this vulnerability be detected on my network or system? Can you suggest some commands?
I don't know
What immediate steps should I take to mitigate this vulnerability?
I don't know