Command Injection in Clawdbot Docker Execution via PATH Environment Variable
A command injection vulnerability in Clawdbot's Docker sandbox mode allowed authenticated users who could control environment variables to execute unintended commands inside containers. The vulnerability arose from unsafe handling of the PATH environment variable in shell command construction and was fixed in version 2026.1.29.
What happened
A command injection vulnerability existed in Clawdbot's Docker sandbox execution mechanism due to unsafe handling of the PATH environment variable when constructing shell commands.
Authenticated users able to control environment variables could influence command execution within the container context by supplying PATH values that would be interpolated into shell commands.
Reported impact
In environments where Docker sandbox mode was enabled, authenticated users capable of supplying environment variables could lead to execution of unintended commands inside the container, access to the container filesystem and environment variables, and exposure of sensitive data.
The vulnerability posed increased risk in misconfigured or privileged container environments.
Index analysis
The vulnerability has a CVSS v3 base score of 8.8 (High severity) with high impact across confidentiality, integrity, and availability, requiring only low privileges and low attack complexity for exploitation.
Governance controls
The vulnerability was fixed in version 2026.1.29 through commit 771f23d36b95ec2204cc9a0054045f5d8439ea75, which modified the Docker command construction to pass the PATH via an internal environment variable without shell interpolation.
Regression tests were added to prevent reintroduction of the vulnerability.
Classification
Sources and evidence
Sources not yet published
This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.