CVE-2026-24763

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.1.29

Description A command injection issue exists in the Docker sandbox execution mechanism due to unsafe handling of the PATH environment variable when constructing shell commands. An authenticated user with the ability to control environment variables can influence command execution within the container context, potentially leading to the execution of unintended commands, access to the container filesystem, and exposure of sensitive data. Over 135,000 instances are exposed to the internet, with approximately 63% being vulnerable.

Recommendations Update to version 2026.1.29.