CVE-2026-32912
Received Received - Intake
Current Directory Injection in OpenClaw Windows Wrapper Enables Command Execution

Publication date: 2026-03-23

Last updated on: 2026-03-23

Assigner: VulnCheck

Description
Rejected reason: This CVE ID has been rejected.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-03-23
Last Modified
2026-03-23
Generated
2026-06-16
AI Q&A
2026-03-24
EPSS Evaluated
N/A
NVD
CVE-2026-32912
EUVD
EUVD-2026-14597
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
openclaw openclaw to 2026.3.1 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-426 The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Executive Summary

OpenClaw versions 2026.2.26 before 2026.3.1 have a vulnerability related to how Windows wrapper resolution handles .cmd and .bat files. Specifically, there is a current working directory injection issue that allows attackers to manipulate the directory context used during wrapper resolution. This manipulation can cause the system to fall back to shell execution in an unintended way, leading to a loss of command execution integrity.

Impact Analysis

This vulnerability can allow an attacker with limited privileges to manipulate the current working directory and cause unauthorized command execution. This can lead to integrity loss in command execution, potentially allowing the attacker to run malicious commands or scripts, which could compromise the affected system.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-32912. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart