Staging Environment: Content and features may be unstable or change without notice.
Advisory details: github_osv / GHSA-rw39-5899-8mxp
Advisory ID github_osv/GHSA-rw39-5899-8mxp
Aliases CVE-2026-32971
Summary OpenClaw: Node-host approvals could show misleading shell payloads instead of the executed argv ## Summary In affected versions of `openclaw`, node-host `system.run` approvals could display only an extracted shell payload such as `jq --version` while execution still ran a different outer wrapper argv such as `./env sh -c 'jq --version'`. ## Impact This is an approval-integrity bug. An attacker who could place or select a local wrapper binary and induce a wrapper-shaped command could get local code executed after the operator approved misleading command text. ## Affected Packages and Versions - Package: `openclaw` (npm) - Affected versions: `<= 2026.3.8` - Fixed in: `2026.3.11` ## Technical Details Wrapper resolution normalized executables by basename and extracted inner shell payload text for approval display, while execution still preserved the full wrapper argv. Approval storage and UI therefore showed text that did not match the exact command OpenClaw would execute. ## Fix OpenClaw now binds approvals to the exact executed argv and keeps extracted shell payload text only as secondary preview data. The fix shipped in `openclaw@2026.3.11`. ## Workarounds Upgrade to `2026.3.11` or later.
Status Published
Exploitability 0.5
Weighted Severity 6.4
Risk 3.2
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (2)
CWE-863 Incorrect Authorization
CWE-436 Interpretation Conflict
System Score Found at
cvssv3.1 7.1 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/03/GHSA-rw39-5899-8mxp/GHSA-rw39-5899-8mxp.json
generic_textual HIGH
Reference id Reference type URL
https://github.com/openclaw/openclaw
CVE-2026-32971 https://nvd.nist.gov/vuln/detail/CVE-2026-32971
GHSA-rw39-5899-8mxp Advisory https://github.com/openclaw/openclaw/security/advisories/GHSA-rw39-5899-8mxp
openclaw-node-host-approval-ui-mismatch-allows-execution-of-unintended-commands Advisory https://www.vulncheck.com/advisories/openclaw-node-host-approval-ui-mismatch-allows-execution-of-unintended-commands
v2026.3.11 Other https://github.com/openclaw/openclaw/releases/tag/v2026.3.11
No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.
Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H Found at https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/03/GHSA-rw39-5899-8mxp/GHSA-rw39-5899-8mxp.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-31T14:57:53Z/

Decision: Track

Source URL: https://github.com/cisagov/vulnrichment/blob/develop/2026/32xxx/CVE-2026-32971.json

Source Advisory: vulnrichment/CVE-2026-32971

View SSVC decision tree 
[{'Exploitation': 'none'},
 {'Automatable': 'no'},
 {'Technical Impact': 'total'},
 {'Mission Prevalence': 'minimal'},
 {'Public Well-being Impact': 'material'},
 {'Mission & Well-being': 'medium'}]