8.6

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-26323

CVE-2026-26323: OpenClaw has a command injection in maintainer clawtributors updater

Summary

Command injection in the maintainer/dev script scripts/update-clawtributors.ts.

Impact

Affects contributors/maintainers (or CI) who run bun scripts/update-clawtributors.ts in a source checkout that contains a malicious commit author email (e.g. crafted @users.noreply.github.com values).

Normal CLI usage is not affected (npm i -g openclaw): this script is not part of the shipped CLI and is not executed during routine operation.

Affected Versions

Source checkouts: tags v2026.1.8 through v2026.2.13 (inclusive)
Version range (structured): >= 2026.1.8, < 2026.2.14

Details

The script derived a GitHub login from git log author metadata and interpolated it into a shell command (via execSync). A malicious commit record could inject shell metacharacters and execute arbitrary commands when the script is run.

Fix

Fix commit: a429380e337152746031d290432a4b93aa553d55
Planned patched version: 2026.2.14

Credits

Thanks @scanleale and @MegaManSec (https://joshua.hu) of AISLE Research Team for reporting.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-26323

CVE-2026-26323:

8.6

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	>= 2026.1.8, < 2026.2.14	2026.2.14

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability is a command injection within the scripts/update-clawtributors.ts developer script. The root cause is the unsafe construction of a shell command using execSync within the fetchUser function. The input for this command, a GitHub login, is derived from git commit history by the resolveLogin function. An attacker could create a commit with a specially crafted author email address. When the update-clawtributors.ts script is executed, the resolveLogin function would extract a malicious string from the commit history and pass it as a 'login' to fetchUser. The fetchUser function would then execute a command with the malicious string, allowing for arbitrary code execution. The patch addresses this by replacing the vulnerable execSync call with the safer execFileSync, which takes command arguments as an array, preventing shell injection. Additionally, a new normalizeLogin function was introduced and applied to all outputs of resolveLogin to ensure the login string has a valid format before being used.

Vulnerable functions

fetchUser

scripts/update-clawtributors.ts

The `fetchUser` function is vulnerable to command injection because it uses `execSync` to execute a `gh api` command where the `login` parameter is interpolated directly into the command string. An attacker could craft a malicious commit author email, which is then parsed by the script to extract a 'login' containing shell metacharacters. This would lead to arbitrary command execution on the machine running the script.

resolveLogin

scripts/update-clawtributors.ts

The `resolveLogin` function is responsible for extracting a GitHub login from commit metadata (author name and email). Before the patch, this function returned the extracted login without any validation. This unvalidated login, potentially containing malicious characters, was then passed to the `fetchUser` function, leading to the command injection. The patch adds calls to `normalizeLogin` to sanitize the return values.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

8.6

-

Basic Information

Basic Information

Concerned about an active attack path?

CVE-2026-26323: OpenClaw has a command injection in maintainer clawtributors updater

Summary

Impact

Affected Versions

Details

Fix

Credits

CVE-2026-26323:

8.6

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

8.6

8.6

Basic Information

Basic Information

Technical Details

CVE-2026-26323: OpenClaw has a command injection in maintainer clawtributors updater

Summary

Impact

Affected Versions

Details

Fix

Credits

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI