---
id: CVE-2026-32917
title: >-
  OpenClaw before 2026.3.13 contains a remote command injection vulnerability in
  the iMessage attachment staging flow that allows attackers to execute
  arbitrary commands on configured remote hosts
summary: >-
  OpenClaw before 2026.3.13 contains a remote command injection vulnerability in
  the iMessage attachment staging flow that allows attackers to execute
  arbitrary commands on configured remote hosts. The vulnerability exists
  because unsaniti…
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-78
vendor: openclaw
product: openclaw
affected:
  - openclaw < 2026.3.13
patched:
  - openclaw 2026.3.13
published: '2026-03-31'
updated: '2026-07-25'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-32917'
references:
  - url: >-
      https://github.com/openclaw/openclaw/commit/a54bf71b4c0cbe554a84340b773df37ee8e959de
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/openclaw/openclaw/security/advisories/GHSA-g2f6-pwvx-r275
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/openclaw-remote-command-injection-via-unsanitized-imessage-attachment-paths-in-scp
    label: disclosure@vulncheck.com
tags:
  - nvd
epss: 0.01973
epssPercentile: 0.79322
ingestedAt: '2026-07-25T10:53:53.320Z'
---

## Overview

OpenClaw before 2026.3.13 contains a remote command injection vulnerability in the iMessage attachment staging flow that allows attackers to execute arbitrary commands on configured remote hosts. The vulnerability exists because unsanitized remote attachment paths containing shell metacharacters are passed directly to the SCP remote operand without validation, enabling command execution when remote attachment staging is enabled.

## Affected

- `openclaw < 2026.3.13`

## Remediation

Upgrade past the affected range:

- `openclaw 2026.3.13`