CVE-2026-32016
Published: 19 March 2026
Summary
CVE-2026-32016 is a high-severity Untrusted Search Path (CWE-426) vulnerability in Openclaw Openclaw. Its CVSS base score is 7.8 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Match Legitimate Resource Name or Location (T1036.005); ranked at the 3.3th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 CM-10 (Software Usage Restrictions) and SI-2 (Flaw Remediation).
Threat & Defense at a Glance
Threat & Defense Details
Mitigating Controls (NIST 800-53 r5)AI
Requires timely identification, reporting, and correction of the specific path validation bypass flaw in OpenClaw via patching to version 2026.2.22 or later.
Enforces deny-all, permit-by-exception policies for software execution, preventing unauthorized binaries from running despite basename-only allowlist bypasses in tools like OpenClaw.
Monitors and controls user-installed software, detecting or blocking the placement and execution of malicious binaries like the attacker's same-name ./echo in unauthorized paths.
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Path validation bypass (basename-only allowlist) directly enables local low-priv attackers to plant/execute matching malicious binaries (masquerading + Unix shell execution) and achieve full system impact, mapping to privilege escalation via exploitation of the security control.
NVD Description
OpenClaw versions prior to 2026.2.22 on macOS contain a path validation bypass vulnerability in the exec-approval allowlist mode that allows local attackers to execute unauthorized binaries by exploiting basename-only allowlist entries. Attackers can execute same-name local binaries ./echo without approval…
more
when security=allowlist and ask=on-miss are configured, bypassing intended path-based policy restrictions.
Deeper analysisAI
CVE-2026-32016 is a path validation bypass vulnerability (CWE-426) affecting OpenClaw versions prior to 2026.2.22 on macOS. It occurs in the exec-approval allowlist mode, where basename-only allowlist entries can be exploited to execute unauthorized binaries. Specifically, attackers can run local binaries with the same name as approved ones, such as ./echo, without triggering approval prompts when security=allowlist and ask=on-miss are configured, thus circumventing intended path-based policy restrictions. The vulnerability carries a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Local attackers with low privileges can exploit this issue with low complexity and no user interaction required. By placing a malicious binary with a basename matching an allowlisted entry in a different path, they bypass restrictions and execute arbitrary code, potentially leading to high confidentiality, integrity, and availability impacts on the system.
Mitigation is available in OpenClaw version 2026.2.22 and later, as detailed in the upstream patch at the referenced GitHub commit (dd41fadcaf58fd9deb963d6e163c56161e7b35dd). Security practitioners should review the GitHub Security Advisory (GHSA-7f4q-9rqh-x36p) and VulnCheck advisory for full details on the fix, which addresses the basename matching logic, and upgrade affected systems immediately.
Details
- CWE(s)