Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw versions prior to 2026.2.22 in macOS node-host system.run contain an allowlist bypass vulnerability that allows remote attackers to execute non-allowlisted commands by exploiting improper parsing of command substitution tokens. Attackers can craft shell payloads with command substitution syntax within double-quoted text to bypass security restrictions and execute arbitrary commands on the system.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
⚡ New CVE Alert: CVE-2026-22179 📊 Severity: 6.6 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-22179 #CVE-2026-22179 #CVE #Medium #CyberSecurity #InfoSec https://t.co/Db7ERCWMDj
Post summary
A tweet announces CVE-2026-22179, presenting basic severity information and linking to NVD, but provides no technical or exploitation details.
CVE-2026-22179 Command Substitution Bypass Vulnerability in OpenClaw macOS Node-Host http://System.run https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-22179
Post summary
A command substitution bypass vulnerability (CVE‑2026‑22179) in OpenClaw macOS Node‑Host has been announced, providing limited technical details but no evidence of exploitation or mitigation.
CVE-2026-22179 OpenClaw versions prior to 2026.2.22 in macOS node-host http://system.run contain an allowlist bypass vulnerability that allows remote attackers to execute non-allowlisted c… https://www.cve.org/CVERecord?id=CVE-2026-22179
Post summary
The post announces CVE-2026-22179, explaining an allowlist bypass in OpenClaw that permits remote execution of non‑allowlisted code on macOS node-hosts.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |