CVE-2026-28391

OpenClaw versions prior to 2026.2.2 fail to properly validate Windows cmd.exe metacharacters in allowlist-gated exec requests (non-default configuration), allowing attackers to bypass command approval restrictions. Remote attackers can craft command strings with shell metacharacters like & or %...% to execute unapproved commands beyond the allowlisted operations.

Affected products

Openclaw, Windows

Openclaw

< 2026.2.2

Fix

Available

CVSS 3.1

9.8 CRITICAL

EPSS

0.5% (40th percentile)

Weakness

CWE-78

NVD status

Modified

Published

2026-03-05

No exploit for CVE-2026-28391 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.