GHSA-g55j-c2v4-pjcg

Suggest an improvement
Source
https://github.com/advisories/GHSA-g55j-c2v4-pjcg
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-g55j-c2v4-pjcg/GHSA-g55j-c2v4-pjcg.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-g55j-c2v4-pjcg
Aliases
Published
2026-02-04T20:06:46Z
Modified
2026-02-06T22:21:37Z
Severity
  • 8.4 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
OpenClaw vulnerable to Unauthenticated Local RCE via WebSocket config.apply
Details

Summary

An unauthenticated local client could use the Gateway WebSocket API to write config via config.apply and set unsafe cliPath values that were later used for command discovery, enabling command injection as the gateway user.

Impact

A local process on the same machine could execute arbitrary commands as the gateway process user.

Details

  • config.apply accepted raw JSON and wrote it to disk after schema validation.
  • cliPath values were not constrained to safe executable names/paths.
  • Command discovery used a shell invocation when resolving executables.

Mitigation

Upgrade to a patched release. If projects cannot upgrade immediately, set gateway.auth and avoid custom cliPath values.

Database specific 
{
    "cwe_ids": [
        "CWE-20",
        "CWE-306",
        "CWE-78"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2026-02-04T20:06:46Z",
    "nvd_published_at": "2026-02-06T21:16:17Z",
    "severity": "HIGH"
}
References

Affected packages

npm / openclaw

Package

Name
openclaw
View open source insights on deps.dev
Purl
pkg:npm/openclaw

Affected ranges

Type
SEMVER
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2026.1.20

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-g55j-c2v4-pjcg/GHSA-g55j-c2v4-pjcg.json"