GitHub Advisoryadvisory · npm
GHSA-7fcc-cw49-xm78 OpenClaw has command injection via Windows shell fallback in Lobster tool execution
HIGH
Official page ↗
- Aliases
- CVE-2026-32000
- Ecosystem
- npm
- Packages
- openclaw
- Severity
- High
- CVSS vector
- CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
- Weaknesses
- CWE-78
- Reviewed
- 2026-03-03
Affected packages
• npm openclaw: < 2026.2.19 → fixed in 2026.2.19
Description
Summary
The Lobster extension tool execution path used a Windows shell fallback (`shell: true`) after spawn failures (`EINVAL`/`ENOENT`). In that fallback path, shell metacharacters in command arguments can be interpreted by the shell, enabling command injection.
Affected Packages / Versions
• Package: `openclaw` (npm)
• Affected versions: `<= 2026.2.17`
• Latest confirmed affected published version: `2026.2.17`
• Patched version: `2026.2.19`
Technical Details
In affected releases (including `v2026.2.17`), `extensions/lobster/src/lobster-tool.ts` retried subprocess launch with `shell: true` on Windows for `EINVAL`/`ENOENT` spawn errors. The fix removes shell fallback and resolves Windows wrappers to explicit executable/script argv execution.
Fix Commit(s)
• `ba7be018da354ea9f803ed356d20464df0437916`
OpenClaw thanks @allsmog for reporting.
Related
Alias · CVE (1)
- CVE-2026-32000 OpenClaw versions prior to 2026.2.19 contain a command injection vulnerability in the Lobster extension tool execution that uses Windows… vulnerability
Weakness · CWE (1)
- CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness