CVE-2026-27545
1 advisory.
npm/openclaw CVE-2026-27545: high, EPSS 0.15%
OpenClaw: Node system.run approval bypass via parent-symlink cwd rebind
Action: Upgrade openclaw to 2026.2.26 or later.
npm i openclaw@2026.2.26Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2026.2.26 | - |
Fixed versions
| 2026.2.26 |
Sources
- osv: GHSA-f7ww-2725-qvw2
- https://github.com/openclaw/openclaw/security/advisories/GHSA-f7ww-2725-qvw2
- https://nvd.nist.gov/vuln/detail/CVE-2026-27545
- https://github.com/openclaw/openclaw/commit/4b4718c8dfce2e2c48404aa5088af7c013bed60b
- https://github.com/openclaw/openclaw/commit/4e690e09c746408b5e27617a20cb3fdc5190dbda
- https://github.com/openclaw/openclaw/commit/78a7ff2d50fb3bcef351571cb5a0f21430a340c1
- https://github.com/openclaw/openclaw/commit/d06632ba45a8482192792c55d5ff0b2e21abb0a7
- https://github.com/openclaw/openclaw/commit/d82c042b09727a6148f3ca651b254c4a677aff26
- https://github.com/openclaw/openclaw
- https://www.vulncheck.com/advisories/openclaw-approval-bypass-via-parent-symlink-current-working-directory-rebind
CVE-2026-27545 · published · modified · JSON