HIGH

CVE-2026-25157

OpenClaw/Clawdbot has OS Command Injection via Project Root Path in sshNodeCommand

CVSS v3

7.7

HIGH

EPSS Score

1.1 %

exploit probability, as of 2026-10-02

CISA KEV

known exploited

Exploitation

none

SSVC status

Description

OpenClaw is a personal AI assistant. Prior to version 2026.1.29, there is an OS command injection vulnerability via the Project Root Path in sshNodeCommand. The sshNodeCommand function constructed a shell script without properly escaping the user-supplied project path in an error message. When the cd command failed, the unescaped path was interpolated directly into an echo statement, allowing arbitrary command execution on the remote SSH host. The parseSSHTarget function did not validate that SS

Technical details

Published: 2026-02-04
Last Modified: 2026-02-13

Frequently asked questions

What is CVE-2026-25157?

Is CVE-2026-25157 actively exploited?

Active exploitation of CVE-2026-25157 has not been confirmed. Its EPSS score was 1.1% on 2026-10-02, the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2026-25157?

CVE-2026-25157 has a CVSS v3 base score of 7.7 (HIGH severity).

Is CVE-2026-25157 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.

Check an IP Search CVEs SIEM & TIP integrations

No credit card required · 500 free checks/month · Free API key

Other 2026 vulnerabilities worth triaging

Ranked by exploit probability (EPSS).

Back to CVE Database