OpenClaw's shell startup env injection bypasses system.run allowlist intent (RCE class)

An attacker exploiting CVE-2026-32056 can achieve remote code execution on systems utilizing vulnerable versions of the openclaw package. This is achieved by crafting malicious environment variables that trigger the execution of attacker-controlled startup files. The potential impact is severe, ranging from unauthorized access to sensitive data and system resources to complete system compromise. This vulnerability shares similarities with other environment variable injection attacks, where attackers manipulate environment variables to execute arbitrary code. The blast radius extends to any application or service relying on the vulnerable openclaw package, potentially impacting a wide range of deployments.

Applications and services built using Node.js and relying on the openclaw package are at risk. Specifically, projects that dynamically execute commands based on user input or external data without proper sanitization are particularly vulnerable. Developers who have not recently reviewed their dependencies or implemented robust input validation practices are also at increased risk.

• nodejs / supply-chain:

  npm list openclaw

• nodejs / supply-chain:

  npm audit openclaw

• nodejs / supply-chain: Check for unusual process executions with environment variables HOME or ZDOTDIR set to attacker-controlled values using ps aux | grep openclaw

1. 2026-03-03Disclosure

   disclosure

2. 2026-03-03Patch

   patch

1. Gereserveerd2026-03-10
2. Gepubliceerd2026-03-03
3. Gewijzigd2026-03-30
4. EPSS bijgewerkt2026-03-28

The primary mitigation for CVE-2026-32056 is to upgrade the openclaw package to version 2026.2.22 or later. If an immediate upgrade is not feasible due to compatibility issues or breaking changes, consider temporarily restricting the HOME and ZDOTDIR environment variables within the application's execution context. While not a complete solution, this can reduce the attack surface. Monitor system logs for suspicious activity related to process execution and environment variable manipulation. Implement a Web Application Firewall (WAF) to filter potentially malicious requests targeting the openclaw package. After upgrading, confirm the fix by running a test application that utilizes openclaw and verifies that the startup files are not executed with attacker-controlled content.