{"cve":"CVE-2026-32056","nvd":{"published":"2026-03-21T01:17:09.103","modified":"2026-06-17T10:35:01.787","status":"Analyzed","description":"OpenClaw versions prior to 2026.2.22 fail to sanitize shell startup environment variables HOME and ZDOTDIR in the system.run function, allowing attackers to bypass command allowlist protections. Remote attackers can inject malicious startup files such as .bash_profile or .zshenv to achieve arbitrary code execution before allowlist-evaluated commands are executed.","cvss_v4":{"vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","score":7.7},"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":9.8},"cwes":["CWE-78"],"references":["https://github.com/openclaw/openclaw/commit/c2c7114ed39a547ab6276e1e933029b9530ee906","https://github.com/openclaw/openclaw/security/advisories/GHSA-xgf2-vxv2-rrmg","https://www.vulncheck.com/advisories/openclaw-remote-code-execution-via-shell-startup-environment-variable-injection-in-system-run"],"products":["openclaw:openclaw"],"source":"nvd","synced_at":"2026-10-19T22:26:19.218427112+00:00"},"epss":{"cve":"CVE-2026-32056","score":0.00581,"percentile":0.4775,"date":"2026-10-31"},"kev":null,"osv":[{"id":"GHSA-xgf2-vxv2-rrmg","url":"https://osv.dev/vulnerability/GHSA-xgf2-vxv2-rrmg","summary":"OpenClaw's shell startup env injection bypasses system.run allowlist intent (RCE class)","modified":"2026-03-30T13:56:22.016195Z","packages":[{"ecosystem":"npm","name":"openclaw","purl":"pkg:npm/openclaw","ranges":["<2026.2.22"],"fixed":["2026.2.22"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}