GHSA-mc68-q9jw-2h3v

Suggest an improvement
Source
https://github.com/advisories/GHSA-mc68-q9jw-2h3v
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-mc68-q9jw-2h3v/GHSA-mc68-q9jw-2h3v.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-mc68-q9jw-2h3v
Aliases
Published
2026-02-02T23:39:47Z
Modified
2026-02-03T17:53:44.194555Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
OpenClaw/Clawdbot Docker Execution has Authenticated Command Injection via PATH Environment Variable
Details

Summary

A Command Injection vulnerability existed in Clawdbot’s Docker sandbox execution mechanism due to unsafe handling of the PATH environment variable when constructing shell commands.

An authenticated user able to control environment variables could influence command execution within the container context. This issue has been fixed and regression tests have been added to prevent reintroduction.

Impact

In environments where Docker sandbox mode was enabled, authenticated users capable of supplying environment variables could affect the behavior of commands executed inside the container.

This could lead to: 1. Execution of unintended commands inside the container 2. Access to the container filesystem and environment variables 3. Exposure of sensitive data 4. Increased risk in misconfigured or privileged container environments

Database specific 
{
    "nvd_published_at": "2026-02-02T23:16:08Z",
    "cwe_ids": [
        "CWE-78"
    ],
    "github_reviewed_at": "2026-02-02T23:39:47Z",
    "severity": "HIGH",
    "github_reviewed": true
}
References

Affected packages

npm / clawdbot

Package

Name
clawdbot
View open source insights on deps.dev
Purl
pkg:npm/clawdbot

Affected ranges

Type
SEMVER
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2026.1.29

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-mc68-q9jw-2h3v/GHSA-mc68-q9jw-2h3v.json"
last_known_affected_version_range 
"<= 2026.1.24"