Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw versions prior to 2026.2.22 on macOS contain a path validation bypass vulnerability in the exec-approval allowlist mode that allows local attackers to execute unauthorized binaries by exploiting basename-only allowlist entries. Attackers can execute same-name local binaries ./echo without approval when security=allowlist and ask=on-miss are configured, bypassing intended path-based policy restrictions.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
CVE-2026-32016 OpenClaw versions prior to 2026.2.22 on macOS contain a path validation bypass vulnerability in the exec-approval allowlist mode that allows local attackers to execut… https://www.cve.org/CVERecord?id=CVE-2026-32016
Post summary
CVE‑2026‑32016 discloses a path validation bypass in OpenClaw’s exec‑approval allowlist mode on macOS, enabling local execution of commands; no PoC, exploit, or patch details are provided.
CVE Alert: CVE-2026-32016 - OpenClaw - OpenClaw - https://www.redpacketsecurity.com/cve-alert-cve-2026-32016-openclaw-openclaw/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-32016 #openclaw #
Post summary
The tweet announces a CVE-2026-32016 alert for OpenClaw and links to a security site, but it does not provide detailed technical data, PoC, or evidence of exploitation.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | apple | macos | - | - | - |
| App | openclaw | openclaw | - | node.js | - |