AVID-2026-R0227

Description

OpenClaw has a command injection in maintainer clawtributors updater (CVE-2026-26323)

Details

OpenClaw is a personal AI assistant. Versions 2026.1.8 through 2026.2.13 have a command injection in the maintainer/dev script scripts/update-clawtributors.ts. The issue affects contributors/maintainers (or CI) who run bun scripts/update-clawtributors.ts in a source checkout that contains a malicious commit author email (e.g. crafted @users[.]noreply[.]github[.]com values). Normal CLI usage is not affected (npm i -g openclaw): this script is not part of the shipped CLI and is not executed during routine operation. The script derived a GitHub login from git log author metadata and interpolated it into a shell command (via execSync). A malicious commit record could inject shell metacharacters and execute arbitrary commands when the script is run. Version 2026.2.14 contains a patch.

References

Affected or Relevant Artifacts

Developer: openclaw
Deployer: openclaw
Artifact Details:

Type	Name
System	openclaw

Impact

AVID Taxonomy Categorization

Risk domains: Security
SEP subcategories: S0100: Software Vulnerability
Lifecycle stages: L06: Deployment

CWE

ID	Description
CWE-78	CWE-78: Improper Neutralization of Special Elements used in an OS Command (‘OS Command Injection’)

Other information

Report Type: Advisory
Credits:
Date Reported: 2026-02-19
Version: 0.3
AVID Entry