Description
OpenClaw versions 2026.1.21 prior to 2026.2.19 contain a command injection vulnerability in the Lobster extension's Windows shell fallback mechanism that allows attackers to inject arbitrary commands through tool-provided arguments. When spawn failures trigger shell fallback with shell: true, attackers can exploit cmd.exe command interpretation to execute malicious commands by controlling workflow arguments.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenClaw | OpenClaw | 2026.1.21 – < 2026.2.19 | 2026.2.19 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | openclaw | >= 2026.1.21, < 2026.2.19 | 2026.2.19 | GHSA-fg3m-vhrr-8gj6 |
Advisories 1
- WID-SEC-2026-0472 OpenClaw: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 12, 2026
References
- GitHub Security Advisory (GHSA-fg3m-vhrr-8gj6) vendor-advisory
- Patch Commit patch
- VulnCheck Advisory: OpenClaw 2026.1.21 < 2026.2.19 - Command Injection via Windows Shell Fallback in Lobster Extension third-party-advisory