Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw versions prior to 2026.2.22 contain an authorization bypass vulnerability in allow-always wrapper persistence that allows attackers to bypass approval checks by persisting wrapper-level allowlist entries instead of validating inner executable intent. Remote attackers can approve benign wrapped system.run commands and subsequently execute different payloads without approval, enabling remote code execution on gateway and node-host execution flows.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-19 | 2 | Disclosure2 |
| 2026-03-21 | 1 | General1 |
⚡ New CVE Alert: CVE-2026-29607 📊 Severity: 6.4 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-29607 #CVE-2026-29607 #CVE #Medium #CyberSecurity #InfoSec https://t.co/5z42WcN6hX
Post summary
The post is a brief announcement of CVE-2026-29607, noting its severity and risk level but providing no technical or exploitation details.
CVE Alert: CVE-2026-29607 - OpenClaw - OpenClaw - https://www.redpacketsecurity.com/cve-alert-cve-2026-29607-openclaw-openclaw/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-29607 #openclaw #
Post summary
An alert for CVE-2026-29607 targeting OpenClaw is posted with a link, but no detailed technical, exploit, or patch information is provided.
CVE-2026-29607 OpenClaw versions prior to 2026.2.22 contain an authorization bypass vulnerability in allow-always wrapper persistence that allows attackers to bypass approval checks… https://www.cve.org/CVERecord?id=CVE-2026-29607
Post summary
The tweet announces that CVE‑2026‑29607 is an authorization bypass vulnerability affecting OpenClaw versions before 2026.2.22, with no mention of PoC, exploitation, or fixes.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |