GitHub Advisoryadvisory · npm

GHSA-4hmj-39m8-jwc7 OpenClaw has ACP CLI approval prompt ANSI escape sequence injection

MEDIUM Published 2026-03-29 Modified 2026-04-24 Official page ↗
Aliases
CVE-2026-35651
Ecosystem
npm
Packages
openclaw
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Weaknesses
CWE-116, CWE-150
Reviewed
2026-03-29

Affected packages

• npm openclaw: >= 2026.2.13, < 2026.3.28 → fixed in 2026.3.28

Description

Summary ACP CLI approval prompt ANSI escape sequence injection Affected Packages / Versions • Package: `openclaw` • Affected versions: `>= 2026.2.13, <= 2026.3.24` • First patched version: `2026.3.25` • Latest published npm version at verification time: `2026.3.24` Details ACP tool titles could previously carry ANSI control sequences into approval prompts and permission logs, letting untrusted tool metadata spoof terminal output. Commit `464e2c10a5edceb380d815adb6ff56e1a4c50f60` sanitizes tool titles at the source and broadens ANSI stripping to full CSI sequences. Verified vulnerable on tag `v2026.3.24` and fixed on `main` by commit `464e2c10a5edceb380d815adb6ff56e1a4c50f60`. Fix Commit(s) • `464e2c10a5edceb380d815adb6ff56e1a4c50f60`

Related

Alias · CVE (1)

  • CVE-2026-35651 OpenClaw versions 2026.2.13 through 2026.3.24 contain an ANSI escape sequence injection vulnerability in approval prompts that allows… vulnerability

Weakness · CWE (2)

  • CWE-116 Improper Encoding or Escaping of Output weakness
  • CWE-150 Improper Neutralization of Escape, Meta, or Control Sequences weakness

References