Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-27002

OpenClaw is a personal AI assistant. Prior to version 2026.2.15, a configuration injection issue in the Docker tool sandbox could allow dangerous Docker options (bind mounts, host networking, unconfined profiles) to be applied, enabling container escape or host data access. OpenClaw 2026.2.15 blocks dangerous sandbox Docker settings and includes runtime enforcement when building `docker create` args; config-schema validation for `network=host`, `seccompProfile=unconfined`, `apparmorProfile=uncon
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:3866a97adb093af9ae75657a65633ef8f41bbadbf6a90ac08fb0966f0c9140ad
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0

Affected products and versions

1 source assertion
{"product":"openclaw","vendor":"openclaw","versions":[{"status":"affected","version":"< 2026.2.15"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9e221fabf369a54f27007bb1e2c47ddb7eb8032cdcde4bde8416ba2e41fcbfee · sha256:c3fdf78adbf4fa4d… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","baseScore":7.7,"baseSeverity":"HIGH","privilegesRequired":"NONE","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"PASSIVE","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH"},"metric_type":"cvssV4_0"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:9e221fabf369a54f27007bb1e2c47ddb7eb8032cdcde4bde8416ba2e41fcbfee · sha256:c3fdf78adbf4fa4d… · /containers/cna/metrics/0/cvssV4_0

CWE assertions

1 source assertion
{"cweId":"CWE-250","description":"CWE-250: Execution with Unnecessary Privileges","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:9e221fabf369a54f27007bb1e2c47ddb7eb8032cdcde4bde8416ba2e41fcbfee · sha256:c3fdf78adbf4fa4d… · /containers/cna/problemTypes/0/descriptions/0

Source references

3 source assertions
{"name":"https://github.com/openclaw/openclaw/commit/887b209db47f1f9322fead241a1c0b043fd38339","tags":["x_refsource_MISC"],"url":"https://github.com/openclaw/openclaw/commit/887b209db47f1f9322fead241a1c0b043fd38339"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9e221fabf369a54f27007bb1e2c47ddb7eb8032cdcde4bde8416ba2e41fcbfee · sha256:c3fdf78adbf4fa4d… · /containers/cna/references/1
{"name":"https://github.com/openclaw/openclaw/releases/tag/v2026.2.15","tags":["x_refsource_MISC"],"url":"https://github.com/openclaw/openclaw/releases/tag/v2026.2.15"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9e221fabf369a54f27007bb1e2c47ddb7eb8032cdcde4bde8416ba2e41fcbfee · sha256:c3fdf78adbf4fa4d… · /containers/cna/references/2
{"name":"https://github.com/openclaw/openclaw/security/advisories/GHSA-w235-x559-36mg","tags":["x_refsource_CONFIRM"],"url":"https://github.com/openclaw/openclaw/security/advisories/GHSA-w235-x559-36mg"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9e221fabf369a54f27007bb1e2c47ddb7eb8032cdcde4bde8416ba2e41fcbfee · sha256:c3fdf78adbf4fa4d… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer