Openclaw cli: OpenClaw has Windows Lobster shell fallback command injection in constrained fallback path (CVE-2026-31995)
Description
OpenClaw CLI on Windows contains a command injection vulnerability in a fallback path where the Lobster extension retries certain spawn failures using a shell. This fallback interprets tool-provided arguments via cmd.exe, potentially allowing command injection. The issue affects versions from 2026.1.21 through 2026.2.17 and is fixed in version 2026.2.19 by removing the shell fallback and enforcing safer execution methods.
CVSS v4.0
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
On Windows, OpenClaw's Lobster extension previously retried spawn failures with shell: true to maintain wrapper compatibility. In this fallback path, arguments provided by tools could be interpreted by cmd.exe, leading to command injection risk. The vulnerability affects openclaw CLI versions >=2026.1.21 and <=2026.2.17. The fix removes the Windows shell fallback, resolving .cmd/.bat shims to concrete Node entrypoints or executables executed without a shell. If no safe entrypoint can be resolved, execution fails closed with an error. The patch is included in version 2026.2.19.
Potential Impact
The vulnerability allows command injection on Windows systems when fallback conditions are triggered and arguments are controlled by a local operator-defined workflow. This could lead to execution of unintended commands via cmd.exe. However, exploitation requires specific fallback-triggering conditions and local argument control, limiting the attack surface.
Mitigation Recommendations
A patch is available in OpenClaw version 2026.2.19 that removes the vulnerable Windows shell fallback. Users should upgrade to this version or later. The fix enforces safe execution by resolving shims to explicit entrypoints and disallows unsafe shell execution. No additional mitigation is required if patched.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- BREW-openclaw-cli-CVE-2026-31995
- Osv Schema Version
- 1.7.3
- Ecosystems
- ["Homebrew"]
- Cvss Version
- 4.0
Threat ID: 6ac245c112601ec6a31670a7
Added to database: 10/04/2026, 12:25:37 UTC
Last enriched: 10/04/2026, 13:06:49 UTC
Last updated: 10/04/2026, 16:08:37 UTC
Views: 1
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.