8.8 HighCWE-184
CVE-2026-44115
OpenClaw vulnerability
Status
- Not in CISA KEV
- Fixed in version 2026.4.22
Exploit probabilityEPSSchecked 24 Oct
0.6%probability of exploitation in the next 30 days
Higher than 48% of scored CVEs
SeverityCVSS
8.8High
Description NVD
OpenClaw before 2026.4.22 contains an exec allowlist analysis vulnerability allowing shell expansion hiding in unquoted heredoc bodies. Attackers can bypass allowlist validation by embedding shell expansion tokens in heredoc bodies to execute unapproved commands at runtime.
Coverage 3 articles · 3 outlets
See the full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Fri 15 May · 16:10 UTC | The Hacker News | OpenClaw chain lets attackers hijack config and steal data |
| Mon 18 May · 12:41 UTC | SecurityWeek | ‘Claw Chain’ OpenClaw Flaws Allow Sandbox Escape, Backdoor Delivery |
| Mon 18 May · 22:11 UTC | Dark Reading | OpenClaw bugs enable full system takeover via chained exploits |
- OpenClaw bugs enable full system takeover via chained exploitsDark Reading · mentions it in passing
- ‘Claw Chain’ OpenClaw Flaws Allow Sandbox Escape, Backdoor DeliverySecurityWeek · mentions it in passing
- OpenClaw chain lets attackers hijack config and steal dataThe Hacker News · first in our coverage · mentions it in passing