OpenClaw has a command injection in maintainer clawtributors updater
Summary
Command injection in the maintainer/dev script scripts/update-clawtributors.ts.
Impact
Affects contributors/maintainers (or CI) who run bun scripts/update-clawtributors.ts in a source checkout that contains a malicious commit author email (e.g. crafted @users.noreply.github.com values).
Normal CLI usage is not affected (npm i -g openclaw): this script is not part of the shipped CLI and is not executed during routine operation.
Affected Versions
- Source checkouts: tags
v2026.1.8throughv2026.2.13(inclusive) - Version range (structured):
>= 2026.1.8, < 2026.2.14
Details
The script derived a GitHub login from git log author metadata and interpolated it into a shell command (via execSync). A malicious commit record could inject shell metacharacters and execute arbitrary commands when the script is run.
Fix
- Fix commit:
a429380e337152746031d290432a4b93aa553d55 - Planned patched version:
2026.2.14
Credits
Thanks @scanleale and @MegaManSec (https://joshua.hu) of AISLE Research Team for reporting.
Affected software
Click a technology to see all vulnerabilities affecting it.
| Platform | Package | Vulnerable versions | Fixed in |
|---|---|---|---|
| npm package | openclaw | >= 2026.1.8, < 2026.2.14 | 2026.2.14 |
References
- https://github.com/openclaw/openclaw/security/advisories/GHSA-m7x8-2w3w-pr42
- https://nvd.nist.gov/vuln/detail/CVE-2026-26323
- https://github.com/openclaw/openclaw/commit/a429380e337152746031d290432a4b93aa553d55
- https://github.com/openclaw/openclaw
- https://github.com/openclaw/openclaw/releases/tag/v2026.2.14
- CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N- Weakness (CWE)
CWE-78- Platform
- npm
- Package
openclaw- Disclosed
- 18.02.2026
- Updated
- 11.10.2026 10:22
Sources and licenses
OSV / GitHub Advisory Database - GHSA-m7x8-2w3w-pr42 - CC BY 4.0
Vulnerability history: openclaw
All published vulnerabilities of this package (npm package), newest first. Shows whether this is a one-off slip or a package that needs watching.
- Total entries
- 588
- First → latest
- 02.2026 07.2026
- Without a fix
- 9
- Exploited in attacks
- 0
Severity breakdown
- Critical 20
- High 215
- Medium 299
- Low 54
Disclosures per year
- 2026: 588
-
OpenClaw has a command injection in maintainer clawtributors updater this entry
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.