Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw versions prior to 2026.2.24 contain a command injection vulnerability in the system.run shell-wrapper that allows attackers to execute hidden commands by injecting positional argv carriers after inline shell payloads. Attackers can craft misleading approval text while executing arbitrary commands through trailing positional arguments that bypass display context validation.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-32052 OpenClaw versions prior to 2026.2.24 contain a command injection vulnerability in the http://system.run shell-wrapper that allows attackers to execute hidden commands by inj… https://www.cve.org/CVERecord?id=CVE-2026-32052
Post summary
The advisory details a command injection flaw in OpenClaw’s system.run shell‑wrapper, enabling attackers to run hidden commands on affected versions.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |