What is GHSA-99qw-6mr3-36qr?

GHSA-99qw-6mr3-36qr is a security advisory published by GitHub Security Advisories with High severity. OpenClaw: Workspace plugin auto-discovery allowed code execution from cloned repositories

Which CVE IDs does GHSA-99qw-6mr3-36qr cover?

GHSA-99qw-6mr3-36qr covers the following CVE IDs: CVE-2026-32920. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-99qw-6mr3-36qr?

GHSA-99qw-6mr3-36qr affects 1 product, including: npm/openclaw:\u003c= 2026.3.11.

GHSA-99qw-6mr3-36qrHigh

OpenClaw: Workspace plugin auto-discovery allowed code execution from cloned repositories

Vendor

GitHub Security Advisories

Published

March 13, 2026

Last Modified

April 6, 2026

🔗 CVE IDs covered (1)

CVE-2026-32920 →

📋 Description

Summary

OpenClaw automatically discovered and loaded plugins from .openclaw/extensions/ inside the current workspace without an explicit trust or install step. A malicious repository could include a crafted workspace plugin that executed as soon as a user ran OpenClaw from that cloned directory.

Impact

Opening or running OpenClaw in an untrusted repository could lead to arbitrary code execution under the user's account.

Affected versions

openclaw <= 2026.3.11

Patch

Fixed in openclaw 2026.3.12. Workspace plugin loading now requires explicit trusted state before execution. Users should update to 2026.3.12 or later and avoid running OpenClaw inside untrusted repositories on older releases.

🎯 Affected products1

npm/openclaw:<= 2026.3.11