OpenClaw vulnerable to Unauthenticated Local RCE via WebSocket config.apply

CAO 8.4CVE-2026-25593 · GHSA-g55j-c2v4-pjcg · Công bố 06/02/2026 · cập nhật 17/06/2026

Tóm tắt nhanh

CVE-2026-25593 là lỗ hổng mức CAO (CVSS 8.4) ảnh hưởng openclaw (openclaw), openclaw.
Xác suất bị khai thác trong 30 ngày tới (EPSS): 0.71%, cao hơn 53.9% các lỗ hổng khác.
Cách xử lý: cập nhật lên 2026.1.20 hoặc mới hơn.

Gói / sản phẩm	Phiên bản bị ảnh hưởng	Phiên bản đã vá
openclaw openclaw	`< 2026.1.20`	`2026.1.20`
openclaw npm	`< 2026.1.20`	`2026.1.20`

Mô tả

Summary

An unauthenticated local client could use the Gateway WebSocket API to write config via config.apply and set unsafe cliPath values that were later used for command discovery, enabling command injection as the gateway user.

Impact

A local process on the same machine could execute arbitrary commands as the gateway process user.

Details

config.apply accepted raw JSON and wrote it to disk after schema validation.
cliPath values were not constrained to safe executable names/paths.
Command discovery used a shell invocation when resolving executables.

Mitigation

Upgrade to a patched release. If projects cannot upgrade immediately, set gateway.auth and avoid custom cliPath values.

Mô tả của NVD

OpenClaw is a personal AI assistant. Prior to 2026.1.20, an unauthenticated local client could use the Gateway WebSocket API to write config via config.apply and set unsafe cliPath values that were later used for command discovery, enabling command injection as the gateway user. This vulnerability is fixed in 2026.1.20.