A critical vulnerability in OpenClaw allows an attacker to achieve arbitrary code execution by tricking a user into running the software within a directory containing a malicious workspace plugin.

The application utilizes an insecure plugin loading mechanism that fails to perform trust verification on extensions found in the .OpenClaw/extensions/ directory. This flaw permits unauthenticated attackers to execute arbitrary code when a user executes the application from a directory containing a crafted plugin.

Successful exploitation grants an attacker the ability to execute arbitrary code with the privileges of the user running the application. This poses a severe risk of full system compromise, data theft, and unauthorized access to sensitive local resources. Given the CVSS score of 8.4, this vulnerability represents a high-severity threat that requires immediate attention to prevent potential lateral movement within the network.

Immediate Action: Update the OpenClaw package to version 2026.3.12 or later to include the necessary trust verification logic.

Proactive Monitoring: Audit file system access logs for suspicious activity within the .OpenClaw/extensions/ directory and monitor for unexpected child processes spawned by the OpenClaw application.

Compensating Controls: Advise users to avoid executing OpenClaw from untrusted or unfamiliar directories, particularly those originating from external sources or cloned repositories, until the update is applied.

Public Exploit Available: Unknown

The risk of arbitrary code execution necessitates an immediate upgrade to version 2026.3.12. Organizations should treat this as a high-priority task, as the mechanism of exploitation is highly conducive to supply chain and developer-focused attacks. Ensure all development environments are patched to prevent potential compromise via malicious workspace configurations.