Vulnerabilities

CVSS

8.8 High

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Risk score

70.4

Published

2026-05-06

Status

Published

OpenClaw before 2026.4.22 contains an exec allowlist analysis vulnerability allowing shell expansion hiding in unquoted heredoc bodies. Attackers can bypass allowlist validation by embedding shell expansion tokens in heredoc bodies to execute unapproved commands at runtime.

Weaknesses

CWE-184

Coverage 1

threat-intel

'Claw Chain' Vulnerabilities Threaten OpenClaw Deployments

New vulnerabilities, dubbed 'Claw Chain,' have been discovered in the OpenClaw open-source AI agent framework, posing a significant risk to deployments. These four flaws – CVE-2026-44112, CVE-2026-44115, CVE-2026-44118,…

Dark Reading · May 18, 2026 Critical

CVE-2026-44112CVE-2026-44115CVE-2026-44118aiagentvulnerability

All articles mentioning it

Advisories and references

• github.com/openclaw/openclaw/security/advisories/GHSA-x3h8-jrgh-p8jx
• github.com/openclaw/openclaw/commit/b2e8b7d4bb2f22eaa16f5c4b07547774...
• vulncheck.com/advisories/openclaw-shell-expansion-bypass-in-unquoted...