OpenClaw: Workspace plugin auto-discovery allowed code execution from cloned repositories

高 8.8CVE-2026-32920 · GHSA-99qw-6mr3-36qr · 31/03/2026 公開 · 25/07/2026 更新

要点

CVE-2026-32920 は openclaw (openclaw), openclaw に影響する深刻度「高」 (CVSS 8.8) の脆弱性です。
今後30日間に悪用される確率（EPSS）：0.34%（全脆弱性の 27.1% より高い）。
対処：2026.3.12 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
openclaw openclaw	`< 2026.3.12`	`2026.3.12`
openclaw npm	`< 2026.3.12`	`2026.3.12`

概要

Summary

OpenClaw automatically discovered and loaded plugins from .openclaw/extensions/ inside the current workspace without an explicit trust or install step. A malicious repository could include a crafted workspace plugin that executed as soon as a user ran OpenClaw from that cloned directory.

Impact

Opening or running OpenClaw in an untrusted repository could lead to arbitrary code execution under the user's account.

Affected versions

openclaw <= 2026.3.11

Patch

Fixed in openclaw 2026.3.12. Workspace plugin loading now requires explicit trusted state before execution. Users should update to 2026.3.12 or later and avoid running OpenClaw inside untrusted repositories on older releases.

NVD の説明

OpenClaw before 2026.3.12 automatically discovers and loads plugins from .OpenClaw/extensions/ without explicit trust verification, allowing arbitrary code execution. Attackers can execute malicious code by including crafted workspace plugins in cloned repositories that execute when users run OpenClaw from the directory.