Command Injection Vulnerability in OpenClaw: WebSocket Shared-Auth Connections
Summary
GHSA-5rp4-cwgh-gvwq: Duplicate Advisory: OpenClaw: WebSocket shared-auth connections could self-declare elevated scopes. Affects openclaw versions < 2026.3.12. Fixed in 2026.3.12. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenClaw is a versatile tool designed for building and managing applications that utilize WebSocket connections. It provides features for real-time communication and is widely used in various web applications. However, versions prior to 2026.2.19 are susceptible to a command injection vulnerability, particularly in the Lobster extension tool, which can lead to unauthorized command execution.
Vulnerability Detail
The vulnerability arises from the use of Windows shell fallback with shell: true after subprocess launch failures. This allows attackers to inject shell metacharacters into command arguments, potentially executing arbitrary commands when subprocess launches fail with EINVAL or ENOENT errors. The implications of this vulnerability can be severe, as it could allow an attacker to gain unauthorized access or control over the system running OpenClaw.
How To Fix
Latest published version: 2026.10.6 as of 22 Oct 2026
npm install openclaw@2026.10.6Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
2026.3.12
This is the first release that contains the fix.
npm install openclaw@2026.3.12Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, avoid using the Lobster extension tool until you can update to the patched version. Additionally, ensure that command arguments are sanitized to prevent injection attacks.
Conclusion
In summary, OpenClaw versions prior to 2026.2.19 are vulnerable to a command injection issue that can lead to serious security risks. It is crucial to update to version 2026.3.12 or later to protect your application. Utilize tools like Vulert to monitor for vulnerabilities and ensure the security of your software.
See every vulnerability recorded for openclaw →
FAQ
The CVSS score of this vulnerability is 6.3, indicating a moderate severity level.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. By using the Vulert playground at Vulert Scanner, you can check if your application is affected without any signup.
If exploited, this vulnerability could allow attackers to execute arbitrary commands on the server, leading to unauthorized access or control over the system.
Yes, versions 2026.3.12 and later are safe to use as they contain the necessary patches to fix this vulnerability.
If you cannot update immediately, refrain from using the Lobster extension tool and ensure that command arguments are properly sanitized to mitigate the risk of injection.
References
Related vulnerabilities
Recent vulnerabilities recorded for openclaw.
