Most recent entries from all

bdu:2026-05004

BREW-openclaw-cli-CVE-2026-32000 — OpenClaw has command injection via Windows shell fallback in Lobster tool execution

Affected: Homebrew: openclaw-cli

## Summary

The Lobster extension tool execution path used a Windows shell fallback (`shell: true`) after spawn failures (`EINVAL`/`ENOENT`). In that fallback path, shell metacharacters in command arguments can be interpreted by the shell, enabling command injection.

## Affected Packages / Versions

- Package: `openclaw` (npm) - Affected versions: `<= 2026.2.17` - Latest confirmed affected published version: `2026.2.17` - Patched version: `2026.2.19`

## Technical Details

In affected releases (including `v2026.2.17`), `extensions/lobster/src/lobster-tool.ts` retried subprocess launch with `shell: true` on Windows for `EINVAL`/`ENOENT` spawn errors. The fix removes shell fallback and resolves Windows wrappers to explicit executable/script argv execution.

## Fix Commit(s)

- `ba7be018da354ea9f803ed356d20464df0437916`

OpenClaw thanks @allsmog for reporting.

EUVD-2026-329397

fkie_cve-2026-32000

OpenClaw versions prior to 2026.2.19 contain a command injection vulnerability in the Lobster extension tool execution that uses Windows shell fallback with shell: true after spawn failures. Attackers can inject shell metacharacters in command arguments to execute arbitrary commands when subprocess launch fails with EINVAL or ENOENT errors.

GHSA-7fcc-cw49-xm78 — OpenClaw has command injection via Windows shell fallback in Lobster tool execution

Affected: npm: openclaw