CVE-2026-24763
High · 8.8CVSS
8.8
EPSS
5.3%
Published
Feb 2, 2026
CISA due date
—
The record
OpenClaw (formerly Clawdbot) is a personal AI assistant you run on your own devices. Prior to 2026.1.29, a command injection vulnerability existed in OpenClaw’s Docker sandbox execution mechanism due to unsafe handling of the PATH environment variable when constructing shell commands. An authenticated user able to control environment variables could influence command execution within the container context. This vulnerability is fixed in 2026.1.29.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | clawdbot | 0 | 2026.1.29 |
Related vulnerabilities
- GHSA-mc68-q9jw-2h3v OpenClaw/Clawdbot Docker Execution has Authenticated Command Injection via PATH… Same vulnerability
- CVE-2026-29612 OpenClaw versions prior to 2026.2.14 decode base64-backed media inputs into buffers… Also affects clawdbot
- CVE-2026-28480 OpenClaw versions prior to 2026.2.14 contain an authorization bypass vulnerability where… Also affects clawdbot
- CVE-2026-28478 OpenClaw versions prior to 2026.2.13 contain a denial of service vulnerability in webhook… Also affects clawdbot
- CVE-2026-28469 OpenClaw versions prior to 2026.2.14 contain a webhook routing vulnerability in the… Also affects clawdbot
- CVE-2026-28452 OpenClaw versions prior to 2026.2.14 contain a denial of service vulnerability in the… Also affects clawdbot
- CVE-2026-26328 OpenClaw is a personal AI assistant. Also affects clawdbot
- CVE-2026-26317 OpenClaw is a personal AI assistant. Also affects clawdbot