CVE-2026-44115

HIGH

OpenClaw < 2026.4.22 - Shell Expansion Bypass in Unquoted Heredocs via Exec Allowlist

Title source: cna
STIX 2.1

Description

OpenClaw before 2026.4.22 contains an exec allowlist analysis vulnerability allowing shell expansion hiding in unquoted heredoc bodies. Attackers can bypass allowlist validation by embedding shell expansion tokens in heredoc bodies to execute unapproved commands at runtime.

References (3)

Core 3
Core References
Vendor Advisory vendor-advisory
GitHub Security Advisory (GHSA-x3h8-jrgh-p8jx)
https://github.com/openclaw/openclaw/security/advisories/GHSA-x3h8-jrgh-p8jx
Third Party Advisory third-party-advisory
VulnCheck Advisory: OpenClaw < 2026.4.22 - Shell Expansion Bypass in Unquoted Heredocs via Exec Allowlist
https://www.vulncheck.com/advisories/openclaw-shell-expansion-bypass-in-unquoted-heredocs-via-exec-allowlist

Scores

CVSS v3 8.8
EPSS 0.0009
EPSS Percentile 24.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-184
Status published
Products (3)
OpenClaw/OpenClaw < 2026.4.22
openclaw/openclaw < 2026.4.22
OpenClaw/OpenClaw 2026.4.22
Published May 06, 2026
Tracked Since May 07, 2026