Openclaw cli: OpneClaw accepts unsanitized iMessage attachment paths which allowed SCP remote-path command injection (CVE-2026-32917)
Description
OpenClaw CLI versions up to 2026.3.12 contain a vulnerability where unsanitized iMessage attachment paths are used in SCP remote-path commands. This allows an attacker to inject shell metacharacters via a crafted iMessage attachment filename, potentially leading to command execution on a configured remote host. The issue is fixed in version 2026.3.13 by validating and rejecting remote paths containing shell metacharacters before invoking SCP.
CVSS v4.0
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
OpenClaw CLI versions <= 2026.3.12 accept unsanitized iMessage remote attachment paths when staging files over SCP. The vulnerability arises because the remote attachment path is not validated for shell metacharacters before being passed as an operand to the SCP command. An attacker controlling the iMessage attachment filename can inject shell commands that execute on the remote host configured for attachment staging. The fix in version 2026.3.13 introduces validation via normalizeScpRemotePath(...) to reject paths containing shell metacharacters, preventing command injection.
Potential Impact
An attacker who can send an iMessage with a specially crafted attachment filename can cause arbitrary command execution on the remote host used for staging attachments via SCP. This crosses a trust boundary from inbound content to host command execution, potentially compromising the remote host. The vulnerability requires the remote attachment staging feature to be enabled and the attacker to control the attachment filename.
Mitigation Recommendations
A fix is available in openclaw version 2026.3.13 which validates and rejects SCP remote paths containing shell metacharacters before spawning the SCP process. Users should upgrade to version 2026.3.13 or later to remediate this vulnerability. No additional mitigation is required if the upgrade is applied.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- BREW-openclaw-cli-CVE-2026-32917
- Osv Schema Version
- 1.7.3
- Ecosystems
- ["Homebrew"]
- Cvss Version
- 4.0
Threat ID: 6ac245b612601ec6a3166bb8
Added to database: 10/04/2026, 12:25:26 UTC
Last enriched: 10/04/2026, 13:00:10 UTC
Last updated: 10/04/2026, 16:08:37 UTC
Views: 1
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.