Executive brief
OpenClaw, a workspace management tool, contains a vulnerability where maintenance tasks can be tricked into running unauthorized software. An attacker with local access could manipulate the system's search path to execute malicious code instead of the intended cleanup commands. This could lead to a full system compromise or unauthorized data access depending on the operator's configuration.
Technical details
OpenClaw before version 2026.5.2 is vulnerable to an Untrusted Search Path (CWE-426) flaw. The root cause is that workspace-derived service PATH environment variables can influence the selection of the 'trash' executable during maintenance tasks. A local attacker with low privileges can manipulate these environment paths to point to a malicious executable, which is then executed by the system during maintenance operations. This allows for arbitrary command execution with the privileges of the OpenClaw operator. The issue is resolved in version 2026.5.2.
Affected products
- OpenClaw openclaw < 2026.5.2
Timeline
- 2026-05-28: disclosed
- 2026-06-16: advisory: NVD/VulnCheck publication
- 2026-06-18: patched: GitHub Advisory updated with patch details