CVE-2026-27002Disclosure(openclaw / openclaw)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch openclaw openclaw systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

OpenClaw is a personal AI assistant. Prior to version 2026.2.15, a configuration injection issue in the Docker tool sandbox could allow dangerous Docker options (bind mounts, host networking, unconfined profiles) to be applied, enabling container escape or host data access. OpenClaw 2026.2.15 blocks dangerous sandbox Docker settings and includes runtime enforcement when building `docker create` args; config-schema validation for `network=host`, `seccompProfile=unconfined`, `apparmorProfile=unconfined`; and security audit findings to surface dangerous sandbox docker config. As a workaround, do not configure `agents.*.sandbox.docker.binds` to mount system directories or Docker socket paths, keep `agents.*.sandbox.docker.network` at `none` (default) or `bridge`, and do not use `unconfined` for seccomp/AppArmor profiles.

openclaw CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Patch / fix

Other references

https://github.com/openclaw/openclaw/releases/tag/v2026.2.15

Weakness type (CWE)

CWE-250

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

openclaw

Threat summary

Patch or workaround signal is available
5 mentions across 3 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 4 signals
Disclosure: 4 classified signals
Peaked 2d ago at 3 mentions (2026-02-20); latest day: 1
5 total mentions across 3 days

Affected systems

Vendors

openclaw

Products

openclaw

Deep dive

Activity timeline5 mentions / 3d

Signal classification2 categories

Disclosure

480.0%

Patch

120.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-20	3	Disclosure2Patch1
2026-02-24	1	Disclosure1
2026-02-25	1	Disclosure1

Full discourse5 posts

CRAC Learning - Tech@cracbot225d
Disclosure
CVE-2026-27002 (CVSS:7.7, CRITICAL) is Analyzed. OpenClaw is a personal AI assistant. Prior to version 2026.2.15, a configuration injection issue in the Docker tool sand..https://nvd.nist.gov/vuln/detail/CVE-2026-27002 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post references CVE-2026-27002, noting its critical severity and a configuration injection flaw in OpenClaw's Docker tool before version 2026.2.15, but provides no evidence of exploitation, PoC, or patch.
1011086
172 followersView on X
The AI generalist@AIengineerlife226d
Disclosure
🚨 CVE-2026-27002 - CRITICAL Openclaw/Openclaw 🤖 AI Summary: Configuration injection in OpenClaw's Docker sandbox allows container escape and host access via dangerous Docker options. Fixe... ThreatScore: 95/100 🔗 http://threatmonitor.io/cve/CVE-2026-27002 #cybersecurity #infosec #CVE
Post summary
CVE-2026-27002 is a critical configuration injection vulnerability in OpenClaw’s Docker sandbox that permits container escape and host access via dangerous Docker options.
0010086
8 followersView on X
The Hacker Wire@TheHackerWire230d
Disclosure
🔴 CVE-2026-27002 - Critical OpenClaw is a personal AI assistant. Prior to version 2026.2.15, a configuration injection issue in the Docker tool sandbox could allow dangerous Docker options (bind mounts, host network... https://www.thehackerwire.com/vulnerability/CVE-2026-27002/ https://t.co/jMBXXe3Eg2
Post summary
A critical configuration injection flaw in OpenClaw's Docker sandbox allows malicious Docker options, marking this as a formal vulnerability disclosure.
0000072
112 followersView on X
CVEarity@CVEarity230d
Disclosure
⚡ New CVE Alert: CVE-2026-27002 📊 Severity: 7.7 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-27002 #CVE-2026-27002 #CVE #High #CyberSecurity #InfoSec https://t.co/EiDZsaFGVT
Post summary
The tweet merely announces a new CVE with severity information, without providing technical details, PoC, exploit, or patch information.
0000039
56 followersView on X
CVE@CVEnew230d
Patch
CVE-2026-27002 OpenClaw is a personal AI assistant. Prior to version 2026.2.15, a configuration injection issue in the Docker tool sandbox could allow dangerous Docker options (bind… https://www.cve.org/CVERecord?id=CVE-2026-27002
Post summary
CVE-2026-27002 is a configuration injection flaw in OpenClaw’s Docker sandbox that could allow dangerous Docker options, mitigated by upgrading to version 2026.2.15.
0000098
56.4K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	openclaw	openclaw	-	node.js	-

Explore more

Back to dashboard openclaw CVEs openclaw vulnerabilities

What researchers are saying

CVE-2026-27002

The AI generalist[verified]@AIengineerlifeDisclosure

CVE-2026-27002 is a critical configuration injection vulnerability in OpenClaw’s Docker sandbox that permits container escape and host access via dangerous Docker options.

CRAC Learning - Tech@cracbotDisclosure

The post references CVE-2026-27002, noting its critical severity and a configuration injection flaw in OpenClaw's Docker tool before version 2026.2.15, but provides no evidence of exploitation, PoC, or patch.

The Hacker Wire@TheHackerWireDisclosure

A critical configuration injection flaw in OpenClaw's Docker sandbox allows malicious Docker options, marking this as a formal vulnerability disclosure.

CVEarity@CVEarityDisclosure

The tweet merely announces a new CVE with severity information, without providing technical details, PoC, exploit, or patch information.

CVE@CVEnewPatch

CVE-2026-27002 is a configuration injection flaw in OpenClaw’s Docker sandbox that could allow dangerous Docker options, mitigated by upgrading to version 2026.2.15.