N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-mqr9-vqhq-3jxw

GHSA-mqr9-vqhq-3jxw: OpenClaw Windows Scheduled Task script generation allowed local command injection via unsafe cmd argument handling

Summary

OpenClaw Windows Scheduled Task script generation allowed unsafe argument handling in generated gateway.cmd files. In vulnerable versions, cmd metacharacter-only values could be emitted without safe quoting/escaping, which could lead to unintended command execution when the scheduled task runs.

Details

The issue affected Windows daemon startup script generation in src/daemon/schtasks.ts.

Vulnerable behavior included:

Incomplete cmd argument quoting for metacharacter-only values.
Incomplete handling of cmd expansion-sensitive characters in script arguments.
Missing CR/LF guards for script-rendered fields.

The fix hardens Windows script generation by:

Separating schtasks argument quoting from batch script argument quoting.
Quoting cmd metacharacter arguments and escaping % / ! expansion cases.
Rejecting CR/LF in command arguments, task descriptions, and rendered environment assignments.
Adding regression tests for metacharacter and line-break injection paths.

Impact

This issue is local to Windows deployments and requires control over values that feed service script generation (for example install-time/runtime arguments or environment-derived values). It can result in unintended command execution in the scheduled task context.

Affected Packages / Versions

Package: openclaw (npm)
Vulnerable versions: <= 2026.2.17
Patched version: >= 2026.2.19 (planned next npm release)
Latest published npm version at update time (2026-02-19): 2026.2.17

Fix Commit(s)

280c6b117b2f0e24f398e5219048cd4cc3b82396

OpenClaw thanks @tdjackey for reporting.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-mqr9-vqhq-3jxw

GHSA-mqr9-vqhq-3jxw:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	< 2026.2.19	2026.2.19

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability lies in the generation of a Windows gateway.cmd script for a scheduled task. The analysis of the patch commit 280c6b117b2f0e24f398e5219048cd4cc3b82396 reveals that the root cause was improper quoting and escaping of arguments and environment variables written into the script.

The primary vulnerable function is buildTaskScript in src/daemon/schtasks.ts. Before the patch, this function used a weak quoting function, quoteCmdArg, which failed to neutralize special command-line metacharacters (e.g., &, |, >). An attacker with control over the inputs to this function (such as program arguments, working directory, or environment variables) could inject arbitrary commands into the generated .cmd file. These commands would then be executed with the privileges of the scheduled task.

The exported function installScheduledTask is the entry point that triggers the vulnerability. It gathers the necessary parameters and calls buildTaskScript to create the script. Therefore, installScheduledTask would appear in a runtime profile or stack trace during an exploitation attempt. The patch remediated the vulnerability by introducing a new, more robust quoting function, quoteCmdScriptArg, which properly handles metacharacters and other special cases for Windows batch scripts. It also added explicit checks to reject newline characters in inputs, preventing another vector for command injection.

Vulnerable functions

buildTaskScript

src/daemon/schtasks.ts

The `buildTaskScript` function was responsible for generating the content of the `gateway.cmd` script. It used the `quoteCmdArg` function, which was insufficient to handle command-line metacharacters. This allowed for command injection through the `programArguments`, `workingDirectory`, and `environment` parameters. The patch replaced `quoteCmdArg` with the more secure `quoteCmdScriptArg` and added validation to prevent line breaks.

installScheduledTask

src/daemon/schtasks.ts

The `installScheduledTask` function orchestrates the creation of the scheduled task. It calls the vulnerable `buildTaskScript` function to generate the script content and writes it to a file. Therefore, any call to `installScheduledTask` with malicious inputs would trigger the vulnerability. The patch also fixed an issue where this function used the insecure `quoteCmdArg` for the script path argument passed to `schtasks.exe`.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.