CVE-2026-31996
OpenClaw safeBins stdin-only bypass via sort output and recursive grep flags
Description
## Summary `tools.exec.safeBins` could be bypassed for filesystem access when `sort` output flags (`-o` / `--output`) or recursive `grep` flags were allowed through safe-bin execution paths. ## Affected Packages / Versions - Package: `openclaw` (npm) - Affected versions: `<= 2026.2.17` - Patched versions: `>= 2026.2.19` - Latest published version at triage time: `2026.2.17` ## Impact In deployments that enabled `tools.exec.safeBins`, an attacker with access to command execution flows could turn intended stdin-only safe-bin usage into file writes (`sort -o`) or recursive file reads (`grep -R`). ## Fix Commit(s) - `2c05cbb43e48ebad03626d3125746fb1b9a8520f` Found using [MCPwner](https://github.com/Pigyon/MCPwner) Thanks @nedlir for reporting.
How to fix CVE-2026-31996
To remediate CVE-2026-31996, upgrade the affected package to a fixed version below.
- —upgrade to 2026.2.19 or later
Is CVE-2026-31996 being exploited?
Low — EPSS is 0.0%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- from 0, < 2026.2.19
CVSS scores
| Source | Version | Severity | Vector |
|---|---|---|---|
| osv | CVSS 3.1 | LOW3.6 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N |