Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw is a personal AI assistant. Prior to version 2026.2.15, in some shared-agent deployments, OpenClaw session tools (`sessions_list`, `sessions_history`, `sessions_send`) allowed broader session targeting than some operators intended. This is primarily a configuration/visibility-scoping issue in multi-user environments where peers are not equally trusted. In Telegram webhook mode, monitor startup also did not fall back to per-account `webhookSecret` when only the account-level secret was configured. In shared-agent, multi-user, less-trusted environments: session-tool access could expose transcript content across peer sessions. In single-agent or trusted environments, practical impact is limited. In Telegram webhook mode, account-level secret wiring could be missed unless an explicit monitor webhook secret override was provided. Version 2026.2.15 fixes the issue.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-27004 OpenClaw Session Tool Vulnerability in Multi-User Shared-Agent Deployments https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-27004
Post summary
The text references CVE-2026-27004 and links to a vulnerability page but provides no PoC, exploit details, active exploitation evidence, patch information, or false-positive claim.
⚡ New CVE Alert: CVE-2026-27004 📊 Severity: 6.9 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-27004 #CVE-2026-27004 #CVE #Medium #CyberSecurity #InfoSec https://t.co/lAtmtlxBeN
Post summary
The tweet announces CVE‑2026‑27004, gives its severity rating (6.9), and links to its NVD entry.
CVE-2026-27004 OpenClaw is a personal AI assistant. Prior to version 2026.2.15, in some shared-agent deployments, OpenClaw session tools (`sessions_list`, `sessions_history`, `sessi… https://www.cve.org/CVERecord?id=CVE-2026-27004
Post summary
The CVE-2026-27004 vulnerability involves OpenClaw session tools in shared‑agent deployments and is addressed in version 2026.2.15.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |