OpenClaw has command injection via Windows shell fallback in Lobster tool execution

HIGH 7.1CVE-2026-32000 · GHSA-7fcc-cw49-xm78 · Published 19/03/2026 · updated 17/06/2026

In short

CVE-2026-32000 is a HIGH (CVSS 7.1) vulnerability affecting openclaw (openclaw), openclaw.
Chance of exploitation in the next 30 days (EPSS): 0.64%, higher than 50.8% of all vulnerabilities.
Fix: update to 2026.2.19 or later.

Package	Affected versions	Patched versions
openclaw openclaw	`< 2026.2.19`	`2026.2.19`
openclaw npm	`< 2026.2.19`	`2026.2.19`

Description

Summary

The Lobster extension tool execution path used a Windows shell fallback (shell: true) after spawn failures (EINVAL/ENOENT). In that fallback path, shell metacharacters in command arguments can be interpreted by the shell, enabling command injection.

Affected Packages / Versions

Package: openclaw (npm)
Affected versions: <= 2026.2.17
Latest confirmed affected published version: 2026.2.17
Patched version: 2026.2.19

Technical Details

In affected releases (including v2026.2.17), extensions/lobster/src/lobster-tool.ts retried subprocess launch with shell: true on Windows for EINVAL/ENOENT spawn errors. The fix removes shell fallback and resolves Windows wrappers to explicit executable/script argv execution.

Fix Commit(s)

ba7be018da354ea9f803ed356d20464df0437916

OpenClaw thanks @allsmog for reporting.

NVD description

OpenClaw versions prior to 2026.2.19 contain a command injection vulnerability in the Lobster extension tool execution that uses Windows shell fallback with shell: true after spawn failures. Attackers can inject shell metacharacters in command arguments to execute arbitrary commands when subprocess launch fails with EINVAL or ENOENT errors.

References

openclaw/openclaw security advisory · WEB
openclaw/openclaw commit ba7be01 · WEB
openclaw/openclaw · PACKAGE
vulncheck.com/advisories/openclaw-command-injection-via-windows-shell-fallback-in-lobster-tool-execution · Third Party Advisory

More vulnerabilities in openclaw

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

openclaw

< 2026.2.19

2026.2.19

openclaw

npm

< 2026.2.19

2026.2.19

Description

Summary

Affected Packages / Versions

Package: openclaw (npm)
Affected versions: <= 2026.2.17
Latest confirmed affected published version: 2026.2.17
Patched version: 2026.2.19

Technical Details

Fix Commit(s)

ba7be018da354ea9f803ed356d20464df0437916

OpenClaw thanks @allsmog for reporting.

NVD description

More vulnerabilities in openclaw

See all →