CVE-2026-31996Disclosure(openclaw / openclaw)

LOWCVSS 7.1 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

OpenClaw versions prior to 2026.2.19 tools.exec.safeBins contains an input validation bypass vulnerability that allows attackers to execute unintended filesystem operations through sort output flags or recursive grep flags. Attackers with command execution access can leverage sort -o flag for arbitrary file writes or grep -R flag for recursive file reads, circumventing intended stdin-only restrictions.

openclaw CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

https://github.com/openclaw/openclaw/commit/2c05cbb43e48ebad03626d3125746fb1b9a8520f

Vendor / third-party advisories

Weakness type (CWE)

CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

openclaw

Threat summary

5 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
Disclosure: 4 classified signals
General: 1 classified signal
Peaked 1d ago at 4 mentions (2026-03-19); latest day: 1
5 total mentions across 2 days

Affected systems

Vendors

openclaw

Products

openclaw

Deep dive

Activity timeline5 mentions / 2d

Signal classification2 categories

Disclosure

480.0%

General

120.0%

Referenced assets5 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-19	4	Disclosure4
2026-03-20	1	General1

Full discourse5 posts

CVEarity@CVEarity203d
General
⚡ New CVE Alert: CVE-2026-31996 📊 Severity: 3.6 🚨 Risk Level: Low 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-31996 #CVE-2026-31996 #CVE #Low #CyberSecurity #InfoSec https://t.co/soK7hS9SV8
Post summary
A low‑severity CVE-2026-31996 is announced with minimal details—no exploitation evidence, patches, or technical specifics beyond the NVD link.
0000028
108 followersView on X
RedPacket Security@RedPacketSec203d
Disclosure
CVE Alert: CVE-2026-31996 - OpenClaw - OpenClaw - https://www.redpacketsecurity.com/cve-alert-cve-2026-31996-openclaw-openclaw/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-31996 #openclaw #
Post summary
The post announces CVE‑2026‑31996 for OpenClaw, providing a link to an alert but offering no technical, exploit, or patch information.
0000080
3.6K followersView on X
CVE@CVEnew203d
Disclosure
CVE-2026-31996 OpenClaw versions prior to 2026.2.19 tools.exec.safeBins contains an input validation bypass vulnerability that allows attackers to execute unintended filesystem oper… https://www.cve.org/CVERecord?id=CVE-2026-31996
Post summary
The text reports CVE‑2026‑31996 as an input validation bypass in OpenClaw that enables unintended filesystem operations in versions prior to 2026.2.19.
0000086
56.7K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds204d
Disclosure
CVE-2026-31996 Input Validation Bypass in OpenClaw Prior to 2026.2.19 Enabling Arbitrary File Operations https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-31996
Post summary
The text delivers basic disclosure info for CVE-2026-31996, describing an input validation bypass that allows arbitrary file operations in OpenClaw, with no PoC, exploit, or patch details provided.
0000041
4.0K followersView on X
CyberDudeBivash® | Global Cybersecurity Company@cyberbivash204d
Disclosure
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-31996 - OpenClaw < 2026.2.19 - safeBins stdin-only bypass via sort output and recursive grep flags Intel Report: http://blog.cyberdudebivash.com/2026/03/cve-2026-31996-openclaw-2026219.html
Post summary
The tweet announces the discovery of CVE-2026-31996 affecting OpenClaw versions before 2026.2.19, providing technical details about a safeBins bypass, without mentioning exploits, patches, or ongoing attacks.
0000077
335 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	openclaw	openclaw	-	node.js	-

Explore more

Back to dashboard openclaw CVEs openclaw vulnerabilities

What researchers are saying

CVE-2026-31996

CVEarity@CVEarityGeneral

A low‑severity CVE-2026-31996 is announced with minimal details—no exploitation evidence, patches, or technical specifics beyond the NVD link.

RedPacket Security@RedPacketSecDisclosure

The post announces CVE‑2026‑31996 for OpenClaw, providing a link to an alert but offering no technical, exploit, or patch information.

CVE@CVEnewDisclosure

The text reports CVE‑2026‑31996 as an input validation bypass in OpenClaw that enables unintended filesystem operations in versions prior to 2026.2.19.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The text delivers basic disclosure info for CVE-2026-31996, describing an input validation bypass that allows arbitrary file operations in OpenClaw, with no PoC, exploit, or patch details provided.

CyberDudeBivash® | Global Cybersecurity Company@cyberbivashDisclosure

The tweet announces the discovery of CVE-2026-31996 affecting OpenClaw versions before 2026.2.19, providing technical details about a safeBins bypass, without mentioning exploits, patches, or ongoing attacks.