| Package | Affected versions | Patched versions |
|---|---|---|
| openclaw | < 2026.3.12 | 2026.3.12 |
| openclaw | < 2026.3.12 | 2026.3.12 |
OpenClaw automatically discovered and loaded plugins from .openclaw/extensions/ inside the current workspace without an explicit trust or install step. A malicious repository could include a crafted workspace plugin that executed as soon as a user ran OpenClaw from that cloned directory.
Opening or running OpenClaw in an untrusted repository could lead to arbitrary code execution under the user's account.
openclaw <= 2026.3.11
Fixed in openclaw 2026.3.12. Workspace plugin loading now requires explicit trusted state before execution. Users should update to 2026.3.12 or later and avoid running OpenClaw inside untrusted repositories on older releases.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free