Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw versions 2026.2.26 prior to 2026.3.1 on Windows contain a current working directory injection vulnerability in wrapper resolution for .cmd/.bat files that allows attackers to influence execution behavior through cwd manipulation. Remote attackers can exploit improper shell execution fallback mechanisms to achieve command execution integrity loss by controlling the current working directory during wrapper resolution.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-19 | 4 | Disclosure3General1 |
| 2026-03-21 | 1 | General1 |
| 2026-03-22 | 1 | Disclosure1 |
CVE-2026-31999 Current Working Directory Injection in OpenClaw Enables Remote Command Execution https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-31999
Post summary
The text references CVE-2026-31999, describing a directory injection flaw in OpenClaw that enables remote command execution, but does not provide PoC, exploit code, patch, or evidence of active exploitation.
`CpenClaw ACPX` is affected by CVE-2026-31999, a cwd injection vulnerability in its Windows wrapper shell fallback. This critical flaw could lead to code execution. Review deployments and monitor for vendor updates. #InfoSec #Vulnerability #Windows https://www.pulsepatch.io/posts/cve-2026-31999-cpenclaw-acpx-cwd-injection
Post summary
CpenClaw ACPX is affected by CVE-2026-31999, a cwd injection vulnerability that could lead to code execution; users should review deployments and monitor for vendor updates.
⚡ New CVE Alert: CVE-2026-31999 📊 Severity: 6.3 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-31999 #CVE-2026-31999 #CVE #Medium #CyberSecurity #InfoSec https://t.co/NC2i95Cqt8
Post summary
The tweet announces CVE‑2026‑31999 with a medium severity score of 6.3 and links to the NVD page, but provides no technical details, PoC, or mitigation information.
CVE Alert: CVE-2026-31999 - OpenClaw - OpenClaw - https://www.redpacketsecurity.com/cve-alert-cve-2026-31999-openclaw-openclaw/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-31999 #openclaw #
Post summary
The post serves as a CVE alert for CVE-2026-31999 relating to OpenClaw, directing readers to an external site for further information, without providing additional technical or exploitation details.
CVE-2026-31999 OpenClaw versions 2026.2.26 prior to 2026.3.1 on Windows contain a current working directory injection vulnerability in wrapper resolution for .cmd/.bat files that al… https://www.cve.org/CVERecord?id=CVE-2026-31999
Post summary
The post announces a directory injection flaw in OpenClaw before version 2026.3.1 and links to the CVE record.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-31999 - OpenClaw 2026.2.26 < 2026.3.1 - Current Working Directory Injection via Windows Wrapper Resolution Fallback Intel Report: http://blog.cyberdudebivash.com/2026/03/cve-2026-31999-openclaw-2026226-202631.html
Post summary
The post announces the discovery of CVE-2026-31999, describing it as a Current Working Directory Injection flaw in certain OpenClaw versions, and directs readers to an external report for additional details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |