highCVSS 7.5Vulnerability
GHSA-rj39-33v7-9xrq
## Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-xgf2-vxv2-rrmg. This link is maintained to preserve external references. ## Original Description OpenClaw versions prior to 2026.2.22 fail to sanitize shell startup environment variables HOME and ZDOTDIR in the system.run function, allowing attackers to bypass command allowlist protections. Remote attackers can inject malicious startup files such as .bash_profile or .zshenv to achieve arbitrary code execution before allowlist-evaluated commands are executed.
Properties
- ghsa_id
- GHSA-rj39-33v7-9xrq
- severity
- high
- summary
- Duplicate Advisory: OpenClaw's shell startup env injection bypasses system.run allowlist intent (RCE class)
- cvss_score
- 7.5
- cve_id
- GHSA-rj39-33v7-9xrq
- cvss_vector
- CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- is_ghsa_only
- true
- ghsa_published
- 2026-03-21T03:31:14Z
- source_url
- https://github.com/advisories/GHSA-rj39-33v7-9xrq
- ghsa_updated
- 2026-03-24T19:06:07Z
Related Entities (3)
AFFECTS (1)
→[Software]npm/OpenClaw
HAS_WEAKNESS (1)
→[Weakness]Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
REPORTED_BY (1)
→[Source]GitHub Advisory Database
Explore deeper with Ninja Signal's threat intelligence graph