CVE-2026-27001

OpenClaw is a personal AI assistant. Prior to version 2026.2.15, OpenClaw embedded the current working directory (workspace path) into the agent system prompt without sanitization. If an attacker can cause OpenClaw to run inside a directory whose name contains control/format characters (for example newlines or Unicode bidi/zero-width markers), those characters could break the prompt structure and inject attacker-controlled instructions. Starting in version 2026.2.15, the workspace path is sanitized before it is embedded into any LLM prompt output, stripping Unicode control/format characters and explicit line/paragraph separators. Workspace path resolution also applies the same sanitization as defense-in-depth.

• CWE-77

• https://github.com/openclaw/openclaw/commit/6254e96acf16e70ceccc8f9b2abecee44d606f79Patch
• https://github.com/openclaw/openclaw/releases/tag/v2026.2.15Product, Release Notes
• https://github.com/openclaw/openclaw/security/advisories/GHSA-2qj5-gwg2-xwc4Patch, Vendor Advisory

Published

Feb 20, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-26994uTLS is a fork of crypto/tls, created to customize ClientHel…6.5
• CVE-2026-26995Rejected reason: Further research determined the issue is an…
• CVE-2026-26996minimatch is a minimal matching utility for converting glob …7.5
• CVE-2026-26997ClipBucket v5 is an open source video sharing platform. Prio…5.4
• CVE-2026-26998Traefik is an HTTP reverse proxy and load balancer. Prior to…4.4
• CVE-2026-26999Traefik is an HTTP reverse proxy and load balancer. Prior to…7.5
• CVE-2026-27002OpenClaw is a personal AI assistant. Prior to version 2026.2…9.8
• CVE-2026-27003OpenClaw is a personal AI assistant. Telegram bot tokens can…5.5
• CVE-2026-27004OpenClaw is a personal AI assistant. Prior to version 2026.2…5.5
• CVE-2026-27005Chartbrew is an open-source web application that can connect…9.8
• CVE-2026-27007OpenClaw is a personal AI assistant. Prior to version 2026.2…3.3
• CVE-2026-27008OpenClaw is a personal AI assistant. Prior to version 2026.2…6.7