CVE-2026-31996: OpenClaw < 2026.2.19 - safeBins stdin-only bypass via sort output and recursive grep flags
OpenClaw versions prior to 2026.2.19 tools.exec.safeBins contains an input validation bypass vulnerability that allows attackers to execute unintended filesystem operations through sort output flags or recursive grep flags. Attackers with command execution access can leverage sort -o flag for arbitrary file writes or grep -R flag for recursive file reads, circumventing intended stdin-only restrictions.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
OpenClawto a version that resolves this vulnerability.Fixed in 2026.2.19
Event History
Frequently Asked Questions
What is the severity of CVE-2026-31996?
CVE-2026-31996 has been classified with a moderate severity level due to its potential to allow unintended filesystem operations.
How do I fix CVE-2026-31996?
To fix CVE-2026-31996, upgrade OpenClaw to version 2026.2.19 or later, which addresses the input validation bypass vulnerability.
What software is affected by CVE-2026-31996?
The vulnerability CVE-2026-31996 affects OpenClaw versions prior to 2026.2.19.
What type of vulnerability is CVE-2026-31996?
CVE-2026-31996 is an input validation bypass vulnerability affecting the tools.exec.safeBins of OpenClaw.
Can CVE-2026-31996 lead to remote code execution?
While CVE-2026-31996 may allow unintended file operations, it does not guarantee remote code execution but poses a risk to filesystem integrity.