Authenticated Command Injection in Clawdbot via PATH Environment Variable
Summary
GHSA-mc68-q9jw-2h3v: OpenClaw/Clawdbot Docker Execution has Authenticated Command Injection via PATH Environment Variable. Affects clawdbot versions < 2026.1.29. Fixed in 2026.1.29. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Clawdbot is an open-source tool designed for executing commands within Docker containers, providing a sandboxed environment for running potentially unsafe operations. It allows users to manage and execute tasks securely. However, a vulnerability has been identified that compromises the integrity of this sandbox, specifically through unsafe handling of the PATH environment variable.
Vulnerability Detail
A Command Injection vulnerability exists in Clawdbot's Docker sandbox execution mechanism due to improper handling of the PATH environment variable when constructing shell commands. Authenticated users who can control environment variables may influence command execution within the container context. This could lead to unintended command execution, unauthorized access to the container filesystem, exposure of sensitive data, and increased risks in misconfigured or privileged container environments. The CVSS score for this vulnerability is 8.8, indicating a high severity level.
How To Fix
Minimum fixed version
2026.1.29
This is the first release that contains the fix.
npm install clawdbot@2026.1.29Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, avoid allowing authenticated users to set environment variables that could influence command execution within the Docker container. This can be done by restricting user permissions and ensuring that only trusted users have access to the environment settings.
Conclusion
The Command Injection vulnerability in Clawdbot poses significant risks to users operating in Docker sandbox mode. It is crucial to update to the latest version to mitigate these risks and ensure the security of your applications. Utilizing tools like Vulert can help monitor for such vulnerabilities in real-time.
See every vulnerability recorded for clawdbot →
FAQ
The vulnerability allows authenticated users to perform command injection through the PATH environment variable, potentially leading to unauthorized command execution.
Any user of Clawdbot who has the ability to set environment variables while using Docker sandbox mode is potentially affected.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Visit Vulert Scanner to check if your application is affected without needing to sign up.
If an immediate update is not possible, restrict user permissions to prevent unauthorized access to environment variables as a temporary measure.
Consequences include execution of unintended commands, access to sensitive data, and increased risk in misconfigured container environments.
References
Related vulnerabilities
Recent vulnerabilities recorded for clawdbot.
