Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw before 2026.3.22 contains an allowlist bypass vulnerability in system.run approvals that fails to unwrap /usr/bin/time wrappers. Attackers can bypass executable binding restrictions by using an unregistered time wrapper to reuse approval state for inner commands.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-35666 OpenClaw before 2026.3.22 contains an allowlist bypass vulnerability in http://system.run approvals that fails to unwrap /usr/bin/time wrappers. Attackers can bypass executa… https://www.cve.org/CVERecord?id=CVE-2026-35666
Post summary
The provided snippet describes CVE-2026-35666 as an allowlist bypass in OpenClaw’s system.run approvals but offers no PoC, exploit code, active exploitation evidence, or patch information.
[CVE-2026-35666: HIGH] OpenClaw before 2026.3.22 has a vulnerability allowing attackers to bypass restrictions on executable bindings by misusing time wrappers in http://system.run approvals.#cve,CVE-2026-35666,#cybersecurity https://cvefind.com/CVE-2026-35666
Post summary
The tweet discloses CVE-2026-35666 in OpenClaw, outlining a bypass via time wrappers, but it does not provide a PoC, exploit, patch, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |