OpenClaw safeBins stdin-only bypass via sort output and recursive grep flags

中危 4.4CVE-2026-31996 · GHSA-4685-c5cp-vp95 · Published 19/03/2026 · updated 17/06/2026

要点

CVE-2026-31996 是影响 openclaw (openclaw), openclaw 的中危 (CVSS 4.4)漏洞。
未来 30 天内被利用的概率（EPSS）：0.14%，高于 3.8% 的漏洞。
修复：升级到 2026.2.19 或更高版本。

Package	Affected versions	Patched versions
openclaw openclaw	`< 2026.2.19`	`2026.2.19`
openclaw npm	`< 2026.2.19`	`2026.2.19`

Description

Summary

tools.exec.safeBins could be bypassed for filesystem access when sort output flags (-o / --output) or recursive grep flags were allowed through safe-bin execution paths.

Affected Packages / Versions

Package: openclaw (npm)
Affected versions: <= 2026.2.17
Patched versions: >= 2026.2.19
Latest published version at triage time: 2026.2.17

Impact

In deployments that enabled tools.exec.safeBins, an attacker with access to command execution flows could turn intended stdin-only safe-bin usage into file writes (sort -o) or recursive file reads (grep -R).

Fix Commit(s)

2c05cbb43e48ebad03626d3125746fb1b9a8520f

Found using MCPwner

Thanks @nedlir for reporting.

NVD description

OpenClaw versions prior to 2026.2.19 tools.exec.safeBins contains an input validation bypass vulnerability that allows attackers to execute unintended filesystem operations through sort output flags or recursive grep flags. Attackers with command execution access can leverage sort -o flag for arbitrary file writes or grep -R flag for recursive file reads, circumventing intended stdin-only restrictions.

References

openclaw/openclaw security advisory · WEB
nvd.nist.gov/vuln/detail/CVE-2026-31996 · ADVISORY
openclaw/openclaw commit 2c05cbb · WEB
openclaw/openclaw · PACKAGE
vulncheck.com/advisories/openclaw-safebins-stdin-only-bypass-via-sort-output-and-recursive-grep-flags · WEB

openclaw 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

openclaw

< 2026.2.19

2026.2.19

openclaw

npm

< 2026.2.19

2026.2.19

Description

Summary

tools.exec.safeBins could be bypassed for filesystem access when sort output flags (-o / --output) or recursive grep flags were allowed through safe-bin execution paths.

Affected Packages / Versions

Package: openclaw (npm)
Affected versions: <= 2026.2.17
Patched versions: >= 2026.2.19
Latest published version at triage time: 2026.2.17

Impact

Fix Commit(s)

2c05cbb43e48ebad03626d3125746fb1b9a8520f

Found using MCPwner

Thanks @nedlir for reporting.

NVD description

openclaw 的其他漏洞

查看全部 →