CVE-2026-32978
OpenClaw before 2026.3.11 contains an approval integrity vulnerability where system.run approvals fail to bind mutable file operands for certain script runners like tsx and jiti. Attackers can obtain approval for benign script commands, rewrite referenced scripts on disk, and execute modified code under the approved run context.
- Affected products
- Openclaw
- Openclaw
- < 2026.3.11
- Fix
- Available
- CVSS 4.0
- 9.4 CRITICAL
- CVSS 3.1
- 8.0 HIGH
- EPSS
- 0.2% (8th percentile)
- Weakness
- CWE-863
- NVD status
- Analyzed
- Published
- 2026-03-29
CVE-2026-32978 at NVD
No indexed exploits for CVE-2026-32978 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2026-32978 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.