OpenClaw is a personal AI assistant. Versions 2026.1.8 through 2026.2.13 have a command injection in the maintainer/dev script `scripts/update-clawtributors.ts`. The issue affects contributors/maintainers (or CI) who run `bun scripts/update-clawtributors.ts` in a source checkout that contains a malicious commit author email (e.g. crafted `@users[.]noreply[.]github[.]com` values). Normal CLI usage is not affected (`npm i -g openclaw`): this script is not part of the shipped CLI and is not executed during routine operation. The script derived a GitHub login from `git log` author metadata and interpolated it into a shell command (via `execSync`). A malicious commit record could inject shell metacharacters and execute arbitrary commands when the script is run. Version 2026.2.14 contains a patch.

OpenClaw Multiple Vulnerabilities February 20

The version of the OpenClaw AI assistant installed on the remote host is prior to 2026.2.14. It is, therefore, affected by multiple vulnerabilities, including:

  - A command injection in the maintainer clawtributors updater script allowed arbitrary command execution via crafted     git commit author metadata. (CVE-2026-26323)

  - The Gateway tool accepted a tool-supplied gatewayUrl without sufficient restrictions, enabling SSRF via outbound     WebSocket connections to user-specified targets. (CVE-2026-26322)

  - The optional Telnyx webhook handler could accept unsigned inbound webhook requests when telnyx.publicKey is not     configured, allowing unauthenticated callers to forge Telnyx events. (CVE-2026-26319)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - OpenClaw is a personal AI assistant. Versions 2026.1.8 through 2026.2.13 have a command injection in the
    maintainer/dev script `scripts/update-clawtributors.ts`. The issue affects contributors/maintainers (or
    CI) who run `bun scripts/update-clawtributors.ts` in a source checkout that contains a malicious commit
    author email (e.g. crafted `@users[.]noreply[.]github[.]com` values). Normal CLI usage is not affected
    (`npm i -g openclaw`): this script is not part of the shipped CLI and is not executed during routine
    operation. The script derived a GitHub login from `git log` author metadata and interpolated it into a
    shell command (via `execSync`). A malicious commit record could inject shell metacharacters and execute
    arbitrary commands when the script is run. Version 2026.2.14 contains a patch. (CVE-2026-26323)

ID	Name	Product	Family	Type	Severity
299797	OpenClaw < 2026.2.14 Multiple Vulnerabilities	Nessus	Artificial Intelligence	Combined	high
437756	SCA: security update for openclaw (GHSA-m7x8-2w3w-pr42)	Tenable Cloud Security	SCA Checks	Local	high
437756	SCA: security update for openclaw (GHSA-m7x8-2w3w-pr42)	Tenable Self-Hosted Container Security	SCA Checks	Local	high

Detections

Analytics

CVE-2026-26323

high

Tenable Plugins

Coming Soon

high

high

high