CVE-2026-44115: OpenClaw < 2026.4.22 - Shell Expansion Bypass in Unquoted Heredocs via Exec Allowlist
OpenClaw before 2026.4.22 contains an exec allowlist analysis vulnerability allowing shell expansion hiding in unquoted heredoc bodies. Attackers can bypass allowlist validation by embedding shell expansion tokens in heredoc bodies to execute unapproved commands at runtime.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-44115?
CVE-2026-44115 is rated as a high severity vulnerability due to its potential for exploitation through bypassing allowlist validations.
How do I fix CVE-2026-44115?
To fix CVE-2026-44115, upgrade OpenClaw to version 2026.4.22 or later to mitigate the shell expansion bypass vulnerability.
What is the impact of CVE-2026-44115?
CVE-2026-44115 allows attackers to exploit an exec allowlist analysis vulnerability, potentially executing unauthorized shell commands via unquoted heredocs.
Which versions of OpenClaw are affected by CVE-2026-44115?
OpenClaw versions prior to 2026.4.22 are affected by CVE-2026-44115.
Can CVE-2026-44115 lead to remote code execution?
Yes, CVE-2026-44115 can potentially lead to remote code execution if exploited by an attacker.