Shell Injection Risk in OpenClaw Package on macOS
Summary
GHSA-4564-pvr2-qq4h: OpenClaw: Prevent shell injection in macOS keychain credential write. Affects openclaw versions < 2026.2.14. Fixed in 2026.2.14. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenClaw is an npm package designed to facilitate interactions with the macOS keychain, allowing users to securely store and manage credentials. It provides a command-line interface (CLI) for managing OAuth tokens and other sensitive information. However, a recent vulnerability has been identified that exposes users to potential shell injection attacks when updating credentials, particularly on macOS systems.
Vulnerability Detail
The vulnerability arises from the way OpenClaw constructs shell commands to write updated credentials into the macOS keychain. Specifically, the command uses 'security add-generic-password -w ...', which incorporates user-controlled OAuth tokens directly into the command line. This practice creates an opportunity for OS command injection, where an attacker could manipulate the input to execute arbitrary commands on the host system. The ramifications of this vulnerability are significant, as it could lead to unauthorized access or control over the system.
How To Fix
Latest published version: 2026.10.6 as of 22 Oct 2026
npm install openclaw@2026.10.6Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
2026.2.14
This is the first release that contains the fix.
npm install openclaw@2026.2.14Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid using the OpenClaw package for credential management until they can update to the patched version. Alternatively, users can manually manage their credentials using the macOS Keychain Access application until the update is applied.
Conclusion
The OpenClaw package has a significant vulnerability that poses a shell injection risk on macOS systems. Users are advised to update to the patched version 2026.2.14 or later to mitigate this risk. For those unable to update immediately, alternative credential management methods should be employed.
See every vulnerability recorded for openclaw →
FAQ
The vulnerability is a shell injection risk that arises from how OpenClaw constructs commands to update credentials in the macOS keychain.
You can check if your application is affected by using Vulert, which monitors open-source vulnerabilities in real-time. Visit Vulert Scanner to check your package-lock.json.
If you cannot update the package right away, consider using the macOS Keychain Access application for managing credentials manually as a temporary measure.
The CVSS score of this vulnerability is 7.6, indicating a high severity level.
More information can be found in the GitHub advisory database, which details the vulnerability and its impact on the OpenClaw package.
References
Related vulnerabilities
Recent vulnerabilities recorded for openclaw.
