Most recent entries from all

BREW-openclaw-cli-CVE-2026-32920 — OpenClaw: Workspace plugin auto-discovery allowed code execution from cloned repositories

Affected: Homebrew: openclaw-cli

### Summary

OpenClaw automatically discovered and loaded plugins from `.openclaw/extensions/` inside the current workspace without an explicit trust or install step. A malicious repository could include a crafted workspace plugin that executed as soon as a user ran OpenClaw from that cloned directory.

### Impact

Opening or running OpenClaw in an untrusted repository could lead to arbitrary code execution under the user's account.

### Affected versions

`openclaw` `<= 2026.3.11`

### Patch

Fixed in `openclaw` `2026.3.12`. Workspace plugin loading now requires explicit trusted state before execution. Users should update to `2026.3.12` or later and avoid running OpenClaw inside untrusted repositories on older releases.

cnvd-2026-19641

EUVD-2026-329469

fkie_cve-2026-32920

OpenClaw before 2026.3.12 automatically discovers and loads plugins from .OpenClaw/extensions/ without explicit trust verification, allowing arbitrary code execution. Attackers can execute malicious code by including crafted workspace plugins in cloned repositories that execute when users run OpenClaw from the directory.

GHSA-99qw-6mr3-36qr — OpenClaw: Workspace plugin auto-discovery allowed code execution from cloned repositories

Affected: npm: openclaw