CVE-2026-31999: openclaw (npm)

Should you act?

Normal patch cycle

No exploitation signal; fix it in your next routine update if you are affected. This signal is computed from CISA KEV, EPSS and CVSS data; it is not an editorial verdict.

No confirmed exploitation. It is not in CISA’s KEV catalog and CISA’s SSVC assessment records no known exploitation. That can change quickly after a public write-up; re-check if you are affected.
EPSS 0.4%, percentile 32: FIRST’s model estimates a 0.4% chance of exploitation activity in the next 30 days, higher than 32% of all scored CVEs (low). EPSS is a probability, not a verdict.
Needs local access needed. Lower urgency for most teams unless an attacker could already run code on the machine.
Only applies if your dependency tree includes openclaw (npm) >= 2026.2.26, < 2026.3.1, fixed in 2026.3.1. Check your lockfile, including transitive dependencies.

What it is

OpenClaw versions 2026.2.26 prior to 2026.3.1 on Windows contain a current working directory injection vulnerability in wrapper resolution for .cmd/.bat files that allows attackers to influence execution behavior through cwd manipulation. Remote attackers can exploit improper shell execution fallback mechanisms to achieve command execution integrity loss by controlling the current working directory during wrapper resolution.

From the GitHub advisory

Summary On Windows ACPX paths, wrapper resolution for .cmd/.bat could fall back to shell execution in ways that allowed cwd influence to alter execution behavior.

Impact In affected Windows ACPX configurations, this could enable command execution integrity loss through cwd-influenced wrapper resolution.

Fix Wrapper resolution now prefers explicit PATH/PATHEXT entrypoint resolution and unwrapped Node/EXE execution, with strict fail-closed handling enabled by default for unresolvable wrapper cases.

Affected and Patched Versions - Affected: >= 2026.2.26,

Weakness type: CWE-78.

Product: openclaw (npm) · Assigned by: VulnCheck · Published: 2026-03-19

Affected and fixed versions

Ecosystem	Package	Vulnerable	First fixed
npm	`openclaw`	>= 2026.2.26, < 2026.3.1	2026.3.1

Vendor	Product	Affected versions (per CVE record)
OpenClaw	OpenClaw	2026.2.26 < 2026.3.1

Severity scores

Scored by	CVSS	Score	Vector
VulnCheck	4.0	5.8 Medium	`CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N`
VulnCheck	3.1	6.3 Medium	`CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H`
GitHub	4.0	9.3	`CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N`

Attack vector: local access needed
Attack complexity: high (needs special conditions)
Attack requirements: none
Privileges required: low (any account)
User interaction: none

CVSS measures how bad a flaw is if exploited, not how likely exploitation is. Read it next to the exploitation data below.

Exploitation and urgency

CISA KEV: not listed (no confirmed in-the-wild exploitation known to CISA).
CISA SSVC assessment: exploitation none, automatable no, technical impact partial.
FIRST EPSS (model of 2026-10-21): 0.39% probability of exploitation activity in the next 30 days; percentile 32.

Timeline

2026-03-02 — GitHub-reviewed advisory GHSA-6f6j-wx9w-ff4j published (critical)
2026-03-19 — CVE record published by VulnCheck
2026-06-23 — CVE record last updated

Sources and references

Original sources first. Version and fix details should always be confirmed against the vendor or project advisory.