OpenClaw versions prior to 2026.2.2 fail to properly validate Windows cmd.exe metacharacters in allowlist-gated exec requests (non-default configuration), allowing attackers to ...
Date: 2026-03
Affected: openclaw/openclaw
Attack vector: other
Category: vulnerability-disclosure
Severity: Critical
CVE: CVE-2026-28391
CVE-2026-28446
CVE-2026-28467
CVE-2026-28470
CVE-2026-28471
CVE-2026-28472
CWE: CWE-287
CWE-303
CWE-306
CWE-78
CWE-918
CVSS: 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

OpenClaw versions prior to 2026.2.2 fail to properly validate Windows cmd.exe metacharacters in allowlist-gated exec requests (non-default configuration), allowing attackers to bypass command approval restrictions. Remote attackers can craft command strings with shell metacharacters like & or %...% to execute unapproved commands beyond the allowlisted operations.


Mitigations:

Architectural layers (MAESTRO):