{"action":"Upgrade openclaw to 2026.2.26 or later.","affected":[{"fixed":"2026.2.26","introduced":"0"}],"component":"openclaw","cve_ids":["CVE-2026-27545"],"ecosystem":"npm","epss":0.00098,"exploited":false,"fixed_versions":["2026.2.26"],"ghsa_id":"GHSA-f7ww-2725-qvw2","id":"tcs_01M5KFMXX55SMMR0WP91R0JBYV","modified_at":"2026-03-18T22:01:33.472977Z","published_at":"2026-03-02T23:35:56Z","references":["https://osv.dev/vulnerability/GHSA-f7ww-2725-qvw2","https://github.com/openclaw/openclaw/security/advisories/GHSA-f7ww-2725-qvw2","https://nvd.nist.gov/vuln/detail/CVE-2026-27545","https://github.com/openclaw/openclaw/commit/4b4718c8dfce2e2c48404aa5088af7c013bed60b","https://github.com/openclaw/openclaw/commit/4e690e09c746408b5e27617a20cb3fdc5190dbda","https://github.com/openclaw/openclaw/commit/78a7ff2d50fb3bcef351571cb5a0f21430a340c1","https://github.com/openclaw/openclaw/commit/d06632ba45a8482192792c55d5ff0b2e21abb0a7","https://github.com/openclaw/openclaw/commit/d82c042b09727a6148f3ca651b254c4a677aff26","https://github.com/openclaw/openclaw","https://www.vulncheck.com/advisories/openclaw-approval-bypass-via-parent-symlink-current-working-directory-rebind"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-f7ww-2725-qvw2","url":"https://osv.dev/vulnerability/GHSA-f7ww-2725-qvw2"}],"summary":"OpenClaw: Node system.run approval bypass via parent-symlink cwd rebind"}