CVE-2026-28466
Last modified
CVE-2026-28466 is a critical-severity vulnerability rated 9.9/10 on the CVSS scale. OpenClaw versions prior to 2026.2.14 contain a vulnerability in the gateway in which it fails to sanitize internal approval fields in node.invoke parameters, allowing authenticated clients to bypass exec approval gating for system.run commands. Attackers with valid gateway credentials can inject approval control fields to execute arbitrary commands on connected node hosts, potentially compromising developer workstations and CI runners.. EPSS estimates a 0.42% chance of exploitation in the next 30 days.
Description
OpenClaw versions prior to 2026.2.14 contain a vulnerability in the gateway in which it fails to sanitize internal approval fields in node.invoke parameters, allowing authenticated clients to bypass exec approval gating for system.run commands. Attackers with valid gateway credentials can inject approval control fields to execute arbitrary commands on connected node hosts, potentially compromising developer workstations and CI runners.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Openclaw | Openclaw | < 2026.2.14 |
References
- https://github.com/openclaw/openclaw/security/advisories/GHSA-gv46-4xfq-jv58Mitigation, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-28466?
How severe is CVE-2026-28466?
How do I fix CVE-2026-28466?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-28460OpenClaw versions prior to 2026.2.22 contain an allowlist by…7.1
- CVE-2026-28461OpenClaw versions prior to 2026.3.1 contain an unbounded mem…8.7
- CVE-2026-28462OpenClaw versions prior to 2026.2.13 contain a vulnerability…9.1
- CVE-2026-28463OpenClaw versions prior to 2026.2.14 contain an arbitrary fi…5.5
- CVE-2026-28464OpenClaw versions prior to 2026.2.12 use non-constant-time s…7.5
- CVE-2026-28465OpenClaw's voice-call plugin versions before 2026.2.3 contai…7.5
- CVE-2026-28467OpenClaw versions prior to 2026.2.2 contain a server-side re…8.6
- CVE-2026-28468OpenClaw versions 2026.1.29-beta.1 prior to 2026.2.14 contai…7.7
- CVE-2026-28469OpenClaw versions prior to 2026.2.14 contain a webhook routi…8.2
- CVE-2026-2847A vulnerability was detected in UTT HiPER 520 1.7.7-160105. …7.3
- CVE-2026-28470OpenClaw versions prior to 2026.2.2 contain an exec approval…9.8
- CVE-2026-28471OpenClaw version 2026.1.14-1 prior to 2026.2.2, with the Mat…6.3
Are you affected by CVE-2026-28466?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST