OpenClaw has command injection via Windows shell fallback in Lobster tool execution

CAO 7.1CVE-2026-32000 · GHSA-7fcc-cw49-xm78 · Công bố 19/03/2026 · cập nhật 17/06/2026

Tóm tắt nhanh

CVE-2026-32000 là lỗ hổng mức CAO (CVSS 7.1) ảnh hưởng openclaw (openclaw), openclaw.
Xác suất bị khai thác trong 30 ngày tới (EPSS): 0.64%, cao hơn 50.8% các lỗ hổng khác.
Cách xử lý: cập nhật lên 2026.2.19 hoặc mới hơn.

Gói / sản phẩm	Phiên bản bị ảnh hưởng	Phiên bản đã vá
openclaw openclaw	`< 2026.2.19`	`2026.2.19`
openclaw npm	`< 2026.2.19`	`2026.2.19`

Mô tả

Summary

The Lobster extension tool execution path used a Windows shell fallback (shell: true) after spawn failures (EINVAL/ENOENT). In that fallback path, shell metacharacters in command arguments can be interpreted by the shell, enabling command injection.

Affected Packages / Versions

Package: openclaw (npm)
Affected versions: <= 2026.2.17
Latest confirmed affected published version: 2026.2.17
Patched version: 2026.2.19

Technical Details

In affected releases (including v2026.2.17), extensions/lobster/src/lobster-tool.ts retried subprocess launch with shell: true on Windows for EINVAL/ENOENT spawn errors. The fix removes shell fallback and resolves Windows wrappers to explicit executable/script argv execution.

Fix Commit(s)

ba7be018da354ea9f803ed356d20464df0437916

OpenClaw thanks @allsmog for reporting.

Mô tả của NVD

OpenClaw versions prior to 2026.2.19 contain a command injection vulnerability in the Lobster extension tool execution that uses Windows shell fallback with shell: true after spawn failures. Attackers can inject shell metacharacters in command arguments to execute arbitrary commands when subprocess launch fails with EINVAL or ENOENT errors.