CVE-2026-32910
Received Received - Intake
Approval Bypass in OpenClaw system.run Enables Executable Rebinding

Publication date: 2026-03-23

Last updated on: 2026-03-23

Assigner: VulnCheck

Description
Rejected reason: This CVE ID has been rejected.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-03-23
Last Modified
2026-03-23
Generated
2026-06-16
AI Q&A
2026-03-24
EPSS Evaluated
N/A
NVD
CVE-2026-32910
EUVD
EUVD-2026-14593
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
openclaw openclaw to 2026.3.1 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-426 The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability exists in OpenClaw versions before 2026.3.1 and involves an approval bypass in the system.run function. Specifically, when the first argument (argv[0]) is not path-like, the system fails to correctly bind the executable's identity. This flaw allows an attacker to rebind the executable after it has been approved, meaning they can modify the PATH resolution to execute a different binary than the one originally approved by the operator.

Impact Analysis

The impact of this vulnerability is significant because it allows an attacker with limited privileges to bypass the approval process and execute unauthorized code. By modifying the PATH resolution after approval, the attacker can run a different binary than intended, potentially leading to unauthorized actions, data compromise, or system integrity issues.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-32910. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart