Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw versions prior to 2026.2.21 fail to filter dangerous process-control environment variables from config env.vars, allowing startup-time code execution. Attackers can inject variables like NODE_OPTIONS or LD_* through configuration to execute arbitrary code in the OpenClaw gateway service runtime context.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
⚡ New CVE Alert: CVE-2026-22177 📊 Severity: 6.1 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-22177 #CVE-2026-22177 #CVE #Medium #CyberSecurity #InfoSec https://t.co/AMUfZJACOW
Post summary
The tweet simply announces the existence of CVE-2026-22177 with basic severity and product info, offering no technical details, PoC, or exploitation evidence.
CVE-2026-22177 OpenClaw Gateway Service Remote Code Execution via Unfiltered Environmen... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-22177 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3
Post summary
The post announces the discovery of CVE‑2026‑22177 for the OpenClaw Gateway Service, including a link to detailed vulnerability information, but does not provide evidence of exploitation, patches, or a PoC.
CVE-2026-22177 OpenClaw versions prior to 2026.2.21 fail to filter dangerous process-control environment variables from config env.vars, allowing startup-time code execution. Attack… https://www.cve.org/CVERecord?id=CVE-2026-22177
Post summary
The post provides a brief disclosure of CVE-2026-22177, noting a code‑execution flaw in OpenClaw caused by unfiltered environment variables, with no evidence of active exploitation or available patches.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |