A local command injection vulnerability in OpenClaw allows authenticated attackers with low privileges to execute arbitrary commands within the context of Windows scheduled tasks.

This is a local OS Command Injection (CWE-78) vulnerability triggered by unsafe handling of command metacharacters and CR/LF sequences during the generation of scheduled task scripts. An attacker with local access and the ability to control service script generation arguments can escape the intended command structure to execute arbitrary code in the scheduled task context.

The ability to inject arbitrary commands into scheduled tasks grants an attacker high-level control over the execution environment, potentially leading to unauthorized data modification or system disruption. Given the CVSS score of 7.1, this represents a significant risk for environments where local users or malicious actors with limited access could escalate their impact by manipulating core service configurations.

Immediate Action: Update the OpenClaw package to version 2026.2.19 or later to incorporate the necessary input sanitization for scheduled task arguments.

Proactive Monitoring: Review Windows Scheduled Task logs and service script generation logs for anomalous entries containing unexpected metacharacters or carriage return sequences.

Compensating Controls: Restrict local user permissions to prevent unauthorized modification of service configuration files or scripts until the update can be applied.

Public Exploit Available: Unknown.

This vulnerability presents a clear risk of local command execution and should be addressed by updating to version 2026.2.19 immediately. Security teams should prioritize patching systems where OpenClaw is deployed, particularly those shared by multiple local users, to prevent potential escalation of privileges through service script manipulation.