OpenClaw Current Working Directory Injection Vulnerability in Windows Wrapper Resolution
Vulnerability
A current working directory injection vulnerability has been identified in OpenClaw versions 2026.2.26 prior to 2026.3.1. This vulnerability arises in the Windows wrapper resolution for .cmd and .bat files, where the execution can fallback to the shell. Attackers have the ability to manipulate the current working directory, thereby altering the wrapper resolution behavior and causing a loss of integrity in command execution.
Impact
Exploitation of this vulnerability could lead to a loss of integrity in command execution, allowing for unauthorized commands to be executed through manipulated wrapper resolutions.
Remediation
Users can upgrade to OpenClaw version 2026.3.1 or later, where this vulnerability has been patched.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.