1. Home
  2. CVE Database
  3. CVE-2026-32921
MEDIUM · 6.3

CVE-2026-32921

OpenClaw before 2026.3.8 contains an approval bypass vulnerability in system.run where mutable script operands are not bound across approval and execution phases. Attackers can obtain approval for scr...

Vulnerability Description

OpenClaw before 2026.3.8 contains an approval bypass vulnerability in system.run where mutable script operands are not bound across approval and execution phases. Attackers can obtain approval for script execution, modify the approved script file before execution, and execute different content while maintaining the same approved command shape.

CVSS Score

6.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
LOW

Affected Products

VendorProductVersions
OpenclawOpenclaw< 2026.3.8

Related Weaknesses (CWE)

CWE-367

References

FAQ

What is CVE-2026-32921?

CVE-2026-32921 is a vulnerability with a CVSS score of 6.3 (MEDIUM). OpenClaw before 2026.3.8 contains an approval bypass vulnerability in system.run where mutable script operands are not bound across approval and execution phases. Attackers can obtain approval for scr...

How severe is CVE-2026-32921?

CVE-2026-32921 has been rated MEDIUM with a CVSS base score of 6.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-32921?

Check the references section above for vendor advisories and patch information. Affected products include: Openclaw Openclaw.