This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login.
Read the full analysis โ
Q1What is this vulnerability? (Essence + Consequences)
๐จ **Essence**: OpenClaw fails to validate Windows `cmd.exe` metacharacters properly. ๐ **Consequences**: Attackers bypass command approval limits and execute unauthorized commands.โฆ
๐ฅ **Affected**: Users of **OpenClaw** (OpenClaw open-source AI assistant). ๐ **Versions**: All versions **prior to 2026.2.2**. ๐ข **Vendor**: OpenClaw.
Q4What can hackers do? (Privileges/Data)
๐ป **Privileges**: High. CVSS Score indicates **High** Confidentiality, Integrity, and Availability impact. ๐ต๏ธ **Action**: Execute **unapproved commands** on the host.โฆ
๐ **Threshold**: **Low**. ๐ซ **Auth**: No authentication required (PR:N). ๐๏ธ **UI**: No user interaction needed (UI:N). ๐ **Vector**: Network accessible (AV:N). โก **Complexity**: Low (AC:L).
Q6Is there a public Exp? (PoC/Wild Exploitation)
๐ซ **Public Exp**: No public PoC or exploit code listed in the data. ๐ **References**: Only vendor advisory and patch commit links available. ๐ต๏ธ **Status**: Theoretical/Unpatched exploitation risk exists.
Q7How to self-check? (Features/Scanning)
๐ **Check**: Scan for OpenClaw installations. ๐ฆ **Version**: Verify if version < **2026.2.2**. ๐ ๏ธ **Tool**: Use VulnCheck or GitHub Security Advisories to detect presence.โฆ
โ **Fixed**: Yes. ๐ฆ **Patch**: Update to **OpenClaw 2026.2.2** or later. ๐ **Source**: Official patch commit available on GitHub (a7f4a53ce80c98ba1452eb90802d447fca9bf3d6).
Q9What if no patch? (Workaround)
๐ง **Workaround**: If patching is delayed, restrict network access to OpenClaw services. ๐ **Mitigation**: Implement strict WAF rules to block `cmd.exe` metacharacter injection attempts.โฆ