Arbitrary Argument Injection Affecting openclaw package, versions >=2026.3.1 <2026.3.2-beta.1
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-JS-OPENCLAW-15372208
- published4 Mar 2026
- disclosed3 Mar 2026
- credittdjackey
Introduced: 3 Mar 2026
New CVE NOT AVAILABLE CWE-88 (opens in a new tab)How to fix?
Upgrade openclaw to version 2026.3.2-beta.1 or higher.
Overview
openclaw is a 🦞 OpenClaw — Personal AI Assistant
Affected versions of this package are vulnerable to Arbitrary Argument Injection via the system.run process. An attacker can execute unintended local scripts by manipulating the wrapper arguments and placing a malicious file in the approved working directory, leading to a divergence between the approved command and the executed behavior. This is only exploitable if the attacker can influence the wrapper arguments, place a local file in the approved working directory, and the operator grants approval for the displayed command.