Executive brief
CpenClaw's ACPX is a Windows wrapper resolution system used to manage command-line tool execution paths. A flaw in the wrapper resolution logic for .cmd and .bat files allows an attacker to influence the current working directory (cwd) to alter which executable gets loaded and executed, potentially enabling arbitrary command execution on affected Windows systems.
Technical details
This is an OS command injection vulnerability (CWE-78) in CpenClaw's ACPX Windows wrapper resolution mechanism. The root cause is insufficient neutralization of current working directory (cwd) influence during .cmd/.bat wrapper resolution, which could fall back to shell execution in ways that allow cwd-based path manipulation. An attacker with the ability to control or influence the cwd in specific ACPX configurations can inject commands through wrapper resolution fallback logic. The attack requires network access and no authentication. The fix, available in version 2026.3.1, enforces explicit PATH/PATHEXT entrypoint resolution and strict fail-closed handling for unresolvable wrappers by default.
Affected products
- CpenClaw openclaw >= 2026.2.26, < 2026.3.1
Timeline
- 2026-03-02: disclosed: Advisory published on GitHub
- 2026-03-01: patched: Patched in version 2026.3.1