---
title: "CVE-2026-31999: CpenClaw's ACPX Windows wrapper shell fallback allowed cwd injection in specific paths"
url: https://erroneo.us/security/cve/CVE-2026-31999/
description: "CVE-2026-31999 (openclaw (npm)): OpenClaw versions 2026.2.26 prior to 2026.3.1 on Windows contain a current working directory injection vulnerability in…"
type: vulnerability-record
section: "Security Digest"
date_published: 2026-03-19
date_modified: 2026-06-23
publisher: erroneo.us
author: erroneo.us Security Desk
cve: "CVE-2026-31999"
kev: false
cvss: 5.8
epss: 0.00388
license: All rights reserved. Quote with attribution and a link.
---

# CVE-2026-31999: CpenClaw's ACPX Windows wrapper shell fallback allowed cwd injection in specific paths

**Signal:** Normal patch cycle. No exploitation signal; fix it in your next routine update if you are affected. (Computed from CISA KEV, EPSS and CVSS; not an editorial verdict.)

## Should you act?

- No confirmed exploitation. It is not in CISA’s KEV catalog and CISA’s SSVC assessment records no known exploitation. That can change quickly after a public write-up; re-check if you are affected.
- EPSS 0.4% , percentile 32: FIRST’s model estimates a 0.4% chance of exploitation activity in the next 30 days, higher than 32% of all scored CVEs (low). EPSS is a probability, not a verdict.
- Needs local access needed. Lower urgency for most teams unless an attacker could already run code on the machine.
- Only applies if your dependency tree includes openclaw (npm) >= 2026.2.26, < 2026.3.1, fixed in 2026.3.1 . Check your lockfile, including transitive dependencies.

## What it is

OpenClaw versions 2026.2.26 prior to 2026.3.1 on Windows contain a current working directory injection vulnerability in wrapper resolution for .cmd/.bat files that allows attackers to influence execution behavior through cwd manipulation. Remote attackers can exploit improper shell execution fallback mechanisms to achieve command execution integrity loss by controlling the current working directory during wrapper resolution.

## Affected packages

- npm `openclaw` >= 2026.2.26, < 2026.3.1 → fixed: 2026.3.1

## Affected products (CVE record)

- OpenClaw OpenClaw: 2026.2.26 < 2026.3.1

## Severity

- VulnCheck CVSS 4.0: 5.8 `CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N`
- VulnCheck CVSS 3.1: 6.3 `CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H`
- GitHub CVSS 4.0: 9.3 `CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N`

## Exploitation

- CISA KEV: not listed (no confirmed in-the-wild exploitation known to CISA).
- CISA SSVC assessment: exploitation none , automatable no , technical impact partial .
- FIRST EPSS (model of 2026-10-21): 0.39% probability of exploitation activity in the next 30 days; percentile 32.

## Sources

- [GitHub Security Advisory (GHSA-6f6j-wx9w-ff4j)](https://github.com/openclaw/openclaw/security/advisories/GHSA-6f6j-wx9w-ff4j)
- [GitHub Advisory GHSA-6f6j-wx9w-ff4j](https://github.com/advisories/GHSA-6f6j-wx9w-ff4j)
- [CVE.org record CVE-2026-31999](https://www.cve.org/CVERecord?id=CVE-2026-31999)
- [NVD entry CVE-2026-31999](https://nvd.nist.gov/vuln/detail/CVE-2026-31999)
- [VulnCheck Advisory: OpenClaw 2026.2.26 < 2026.3.1 - Current Working Directory Injection via Windows Wrapper Resolution Fallback](https://www.vulncheck.com/advisories/openclaw-current-working-directory-injection-via-windows-wrapper-resolution-fallback)

---
Source page: https://erroneo.us/security/cve/CVE-2026-31999/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt