PT-2026-26019 · Openclaw · Openclaw
Tdjackey
·
Published
2026-02-26
·
Updated
2026-03-18
·
CVE-2026-27545
CVSS v4.0
8.7
High
| Vector | AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
OpenClaw versions prior to 2026.2.26
Description
OpenClaw is susceptible to an approval bypass issue within the
system.run execution process. This allows attackers to execute commands from unexpected filesystem locations by manipulating writable parent symlinks in the current working directory after approval. Specifically, an attacker can modify mutable parent symlink path components between the approval and execution phases, redirecting command execution while maintaining the apparent working directory. The issue arises from the ability to bypass approval context for host=node executions by rebinding a writable parent symlink in the current working directory (cwd) after approval, preserving the visible cwd string. The vulnerability impacts command execution where an approved command for one filesystem location could be executed from a different location if a mutable parent symlink is altered between approval and execution. The vulnerable function is system.run.Recommendations
OpenClaw versions prior to 2026.2.26 should be updated to version 2026.2.26 or later.
Fix
Link Following
Time Of Check To Time Of Use
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Openclaw