Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw versions prior to 2026.2.26 contain an approval bypass vulnerability in system.run execution that allows attackers to execute commands from unintended filesystem locations by rebinding writable parent symlinks in the current working directory after approval. An attacker can modify mutable parent symlink path components between approval and execution time to redirect command execution to a different location while preserving the visible working directory string.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
⚡ New CVE Alert: CVE-2026-27545 📊 Severity: 6.1 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-27545 #CVE-2026-27545 #CVE #Medium #CyberSecurity #InfoSec https://t.co/vZGnklySkE
Post summary
The tweet announces the existence of CVE-2026-27545, noting its severity and providing a reference link, but it offers no further technical or exploit details.
CVE-2026-27545 OpenClaw versions prior to 2026.2.26 contain an approval bypass vulnerability in http://system.run execution that allows attackers to execute commands from unintended filesy… https://www.cve.org/CVERecord?id=CVE-2026-27545
Post summary
The statement announces a new CVE (CVE-2026-27545) describing an approval bypass that enables command execution via http://system.run in affected OpenClaw versions, but lacks PoC, exploit, active use, or patch details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |