CVE-2026-24763 json
Authenticated Command Injection in OpenClaw Docker Execution via PATH Environment Variable
published 2026-02-02 9 mo ago modified 2026-06-17 4 mo ago also GHSA-mc68-q9jw-2h3v , EUVD-2026-5401
- cvss
- 8.8
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 5.2%
- EPSS 5.2% chance of exploitation in 30 days, percentile 92%
- public exploits
- 0
- none known
Summary
OpenClaw (formerly Clawdbot) is a personal AI assistant you run on your own devices. Prior to 2026.1.29, a command injection vulnerability existed in OpenClaw’s Docker sandbox execution mechanism due to unsafe handling of the PATH environment variable when constructing shell commands. An authenticated user able to control environment variables could influence command execution within the container context. This vulnerability is fixed in 2026.1.29.
Patch / fix
- npm clawdbot 2026.1.29
- openclaw openclaw 2026.1.29
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- total
- Assessed
- 9 mo ago
Exploit prediction
5.22% chance of exploitation in the next 30 days, higher than 92% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 8.8 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| GitHub | 3.1 | 8.8 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| npm | clawdbot | <2026.1.29 |
2026.1.29 |
Affected products
- clawdbot clawdbot
Classification
- Weakness
-
- CWE-78 Improper Neutralization of Special Elements used in an OS Command
References
-
github.com
/openclaw/openclaw/commit/771f23d36b95ec2204cc9a0054045f5d8439ea75
web, patch
-
github.com
/openclaw/openclaw/security/advisories/GHSA-mc68-q9jw-2h3v
web, vendor-advisory
-
github.com
/openclaw/openclaw/releases/tag/v2026.1.29
web, product, release-notes
-
github.com
/clawdbot/clawdbot/security/advisories/GHSA-mc68-q9jw-2h3v
web
-
nvd.nist.gov
/vuln/detail/CVE-2026-24763
advisory
-
github.com
/openclaw/openclaw
package
Sources
- CVE List CVE-2026-24763
- GitHub Advisory GHSA-mc68-q9jw-2h3v
- NVD CVE-2026-24763
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.