OpenClaw OS Command Injection Vulnerability in SSH Remote Connection Handling

A command injection vulnerability has been identified in OpenClaw, a personal AI assistant, prior to version 2026.1.29. The issue arises in the macOS application's SSH remote connection handling, specifically within the sshNodeCommand function. This function improperly escapes user-supplied project paths, allowing arbitrary command execution on the remote SSH host. Additionally, the parseSSHTarget function fails to validate SSH target strings, enabling execution of commands on the local machine when an attacker-supplied target is used.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution on the user's local machine or on a configured remote SSH host, depending on the input vector exploited.

Remediation

Users can update to OpenClaw version 2026.1.29 or later to address this vulnerability.