Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw versions prior to 2026.2.21 contain an approval-integrity mismatch vulnerability in system.run that allows authenticated operators to execute arbitrary trailing arguments after cmd.exe /c while approval text reflects only a benign command. Attackers can smuggle malicious arguments through cmd.exe /c to achieve local command execution on trusted Windows nodes with mismatched audit logs.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
⚡ New CVE Alert: CVE-2026-22168 📊 Severity: 6.5 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-22168 #CVE-2026-22168 #CVE #Medium #CyberSecurity #InfoSec https://t.co/BTMHhLEmg4
Post summary
The tweet announces a new CVE-2026-22168 with a medium severity score but offers no technical, exploit, or mitigation details.
CVE-2026-22168 OpenClaw versions prior to 2026.2.21 contain an approval-integrity mismatch vulnerability in http://system.run that allows authenticated operators to execute arbitrary trail… https://www.cve.org/CVERecord?id=CVE-2026-22168
Post summary
The post announces CVE‑2026‑22168, a vulnerability in OpenClaw versions before 2026.2.21 where an approval‑integrity mismatch in system.run lets authenticated operators run arbitrary code.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |