CVE-2026-27566Disclosure(openclaw / openclaw)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in system.run exec analysis that fails to unwrap env and shell-dispatch wrapper chains. Attackers can route execution through wrapper binaries like env bash to smuggle payloads that satisfy allowlist entries while executing non-allowlisted commands.

openclaw CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

https://github.com/openclaw/openclaw/commit/2b63592be57782c8946e521bc81286933f0f99c7

Vendor / third-party advisories

Weakness type (CWE)

CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

openclaw

Threat summary

5 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
Disclosure: 4 classified signals
General: 1 classified signal
Peaked 1d ago at 4 mentions (2026-03-19); latest day: 1
5 total mentions across 2 days

Affected systems

Vendors

openclaw

Products

openclaw

Deep dive

Activity timeline5 mentions / 2d

Signal classification2 categories

Disclosure

480.0%

General

120.0%

Referenced assets7 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-19	4	Disclosure4
2026-03-21	1	General1

Full discourse5 posts

CVEarity@CVEarity203d
General
⚡ New CVE Alert: CVE-2026-27566 📊 Severity: 7.1 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-27566 #CVE-2026-27566 #CVE #High #CyberSecurity #InfoSec https://t.co/USkoUiqmXI
Post summary
The message provides a basic alert about CVE-2026-27566, stating its severity but offering no technical, exploit, or mitigation details.
0000028
108 followersView on X
VulnTracker@vuln_tracker205d
Disclosure
🚨 6 high-severity CVEs dropped today for OpenClaw - the popular AI automation platform CVE-2026-28461 (7.5) - Memory exhaustion via webhook CVE-2026-31989 (7.4) - SSRF via web_search CVE-2026-27566 (7.1) - Allowlist bypass CVE-2026-31992 (7.1) - Exec-guard bypass CVE-2026-31994 (7.1) - Command injection CVE-2026-31998 (7.0) - Auth bypass Popular platforms = bigger targets. Track everything: http://vulntracker.io
Post summary
A tweet announces six high‑severity CVEs for OpenClaw with brief severity scores and titles, but offers no exploit code, PoC, patch information, or evidence of active exploitation.
00000124
433 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds205d
Disclosure
CVE-2026-27566 OpenClaw Allowlist Bypass Vulnerability in http://System.Run Exec Analysis Before 2026.2.22 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-27566
Post summary
The text announces CVE-2026-27566 as an allowlist bypass in OpenClaw, provides a link for more information, but lacks further technical, PoC, exploit, or patch details.
0000057
4.0K followersView on X
CVE@CVEnew205d
Disclosure
CVE-2026-27566 OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in http://system.run exec analysis that fails to unwrap env and shell-dispatch wrapper chains.… https://www.cve.org/CVERecord?id=CVE-2026-27566
Post summary
The text reports an allowlist bypass vulnerability in OpenClaw's system.run exec analysis affecting versions before 2026.2.22.
00000115
56.7K followersView on X
RedPacket Security@RedPacketSec205d
Disclosure
CVE Alert: CVE-2026-27566 - OpenClaw - OpenClaw - https://www.redpacketsecurity.com/cve-alert-cve-2026-27566-openclaw-openclaw/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-27566 #openclaw #
Post summary
A new vulnerability (CVE-2026-27566) has been announced for OpenClaw, linking to a CVE alert page but providing no further technical or exploit details.
0000071
3.6K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	openclaw	openclaw	-	node.js	-

Explore more

Back to dashboard openclaw CVEs openclaw vulnerabilities

What researchers are saying

CVE-2026-27566

VulnTracker[verified]@vuln_trackerDisclosure

A tweet announces six high‑severity CVEs for OpenClaw with brief severity scores and titles, but offers no exploit code, PoC, patch information, or evidence of active exploitation.

CVEarity@CVEarityGeneral

The message provides a basic alert about CVE-2026-27566, stating its severity but offering no technical, exploit, or mitigation details.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The text announces CVE-2026-27566 as an allowlist bypass in OpenClaw, provides a link for more information, but lacks further technical, PoC, exploit, or patch details.

CVE@CVEnewDisclosure

The text reports an allowlist bypass vulnerability in OpenClaw's system.run exec analysis affecting versions before 2026.2.22.

RedPacket Security@RedPacketSecDisclosure

A new vulnerability (CVE-2026-27566) has been announced for OpenClaw, linking to a CVE alert page but providing no further technical or exploit details.