Vendor
clawdbot
2 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
High 8.8
Authenticated Command Injection in OpenClaw Docker Execution via PATH Environment Variable
OpenClaw (formerly Clawdbot) is a personal AI assistant you run on your own devices. Prior to 2026.1.29, a command injection vulnerability existed in OpenClaw’s Docker sandbox execution mechanism due to unsafe handling of the PATH environment variable when co…