PT-2026-26222 · Openclaw · Openclaw

Tdjackey · Published 2026-02-22 · Updated 2026-03-21 · CVE-2026-27566

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.2.22

Description The system.run exec analysis in OpenClaw fails to fully unwrap env and shell-dispatch wrapper chains, resulting in an allowlist bypass. This allows wrapper-smuggled payloads, such as env bash -lc ..., to satisfy allowlist entries for the wrapper while executing non-allowlisted commands. An attacker who can trigger system.run requests under an allowlist policy could bypass intended allowlist restrictions by routing execution through wrapper binaries.

Recommendations Update OpenClaw to version 2026.2.22 or later.

Fix

OS Command Injection

Incorrect Authorization

Weakness Enumeration

CWE-78

CWE-863

Related Identifiers

BDU:2026-05025

CVE-2026-27566

GHSA-3846-MFVC-XWPF

GHSA-JJ82-76V6-933R

Affected Products

Openclaw

References · 14

• https://github.com/openclaw/openclaw/commit/2b63592be57782c8946e521bc81286933f0f99c7 · Patch
• https://github.com/openclaw/openclaw/security/advisories/GHSA-jj82-76v6-933r · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-27566 · Security Note
• https://osv.dev/vulnerability/GHSA-jj82-76v6-933r · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-05025 · Security Note
• https://osv.dev/vulnerability/CVE-2026-27566 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-3846-mfvc-xwpf · Vendor Advisory
• https://github.com/openclaw/openclaw · Note
• https://vulncheck.com/advisories/openclaw-allowlist-bypass-via-wrapper-binary-unwrapping-in-system-run · Note
• https://twitter.com/vuln_tracker/status/2034696935341224267 · Twitter Post
• https://twitter.com/CVEarity/status/2035247017073811786 · Twitter Post
• https://twitter.com/CVEnew/status/2034520401414426894 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2034526714978562413 · Twitter Post
• https://twitter.com/RedPacketSec/status/2034508371139690691 · Twitter Post