npm/openclaw CVE-2026-27183: medium 5.3, EPSS 0.11%
OpenClaw: system.run wrapper-depth boundary could skip shell approval gating
Action: Upgrade openclaw to 2026.3.7 or later.
npm i openclaw@2026.3.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2026.3.7 | - |
Fixed versions
| 2026.3.7 |
Sources
- osv: GHSA-r6qf-8968-wj9q
- https://github.com/openclaw/openclaw/security/advisories/GHSA-r6qf-8968-wj9q
- https://nvd.nist.gov/vuln/detail/CVE-2026-27183
- https://github.com/openclaw/openclaw/commit/2fc95a7cfc1eb9306356510b0251b6d51fb1c0b0
- https://github.com/openclaw/openclaw
- https://github.com/openclaw/openclaw/releases/tag/v2026.3.7
- https://vulncheck.com/advisories/openclaw-mar-shell-approval-gating-bypass-via-dispatch-wrapper-depth-mismatch
CVE-2026-27183 · published · modified · JSON