CVE-2026-24763 Authenticated Command Injection in OpenClaw Docker Execution via PATH Environment Variable

High 8.8 Published 2 Feb 2026 Updated 4 Feb 2026

Authenticated users can execute arbitrary commands in the Docker sandbox by manipulating the PATH environment variable in OpenClaw.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2026-24763?

CVE-2026-24763 is a high-severity command injection vulnerability in Openclaw Openclaw, published on 2 Feb 2026. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

OpenClaw (formerly Clawdbot) is a personal AI assistant you run on your own devices. Prior to 2026.1.29, a command injection vulnerability existed in OpenClaw’s Docker sandbox execution mechanism due to unsafe handling of the PATH environment variable when constructing shell commands. An authenticated user able to control environment variables could influence command execution within the container context. This vulnerability is fixed in 2026.1.29.

Weakness: CWE-78

Which versions are affected by CVE-2026-24763?

2 open source packages ship an affected version, including clawdbot. It affects 1 product.

Package	Affected	Fixed in
`clawdbot` npm	All versions	`2026.1.29`
`clawdbot` npm	All versions	`2026.1.29`

Products include Openclaw Openclaw.

How do I fix CVE-2026-24763?

Upgrade clawdbot to 2026.1.29 or later.

Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.

Is CVE-2026-24763 being exploited?

There is no known exploitation of CVE-2026-24763 in the wild and no public exploit code.

All Openclaw Openclaw vulnerabilities

Sources

Also known as GHSA-mc68-q9jw-2h3v.