What is the CVSS score of CVE-2026-27487?

CVE-2026-27487 has a CVSS 3.1 base score of 7.6 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L. EPSS exploitation probability: 0.1%.

Which versions of macOS are affected by CVE-2026-27487?

OpenClaw users on macOS running version 2026.2.13 or below face a command injection vulnerability that could allow attackers to compromise stored credentials and gain unauthorized access to sensitive…. A patch is available.

How to fix or mitigate CVE-2026-27487?

Within 24 hours: Inventory all macOS systems running OpenClaw and identify affected versions. Within 7 days: Apply the available patch to all vulnerable OpenClaw instances and validate successful updates. Within 30 days: Conduct credential audit to ensure no unauthorized access occurred during the vulnerability window and implement additional monitoring for suspicious keychain access patterns.

macOS CVE-2026-27487

HIGH

OS Command Injection (CWE-78)

2026-02-21 security-advisories@github.com

GHSA-4564-pvr2-qq4h

macOS Command Injection AI / ML Openclaw

7.6

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

7.6 HIGH

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

Low

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:04 vuln.today

Patch released

Feb 23, 2026 - 20:41 nvd

Patch available

CVE Published

Feb 21, 2026 - 10:16 nvd

HIGH 7.6

DescriptionGitHub Advisory

OpenClaw is a personal AI assistant. In versions 2026.2.13 and below, when using macOS, the Claude CLI keychain credential refresh path constructed a shell command to write the updated JSON blob into Keychain via security add-generic-password -w .... Because OAuth tokens are user-controlled data, this created an OS command injection risk. This issue has been fixed in version 2026.2.14.

AnalysisAI

OpenClaw AI assistant on macOS versions 2026.2.13 and earlier is vulnerable to command injection through the credential refresh mechanism, which improperly handles user-controlled OAuth tokens when constructing shell commands for Keychain operations. An authenticated attacker with local access could exploit this to execute arbitrary OS commands with the privileges of the application user. The vulnerability has been patched in version 2026.2.14.

Technical ContextAI

Classified as CWE-78 (OS Command Injection). Affects Openclaw. OpenClaw is a personal AI assistant. In versions 2026.2.13 and below, when using macOS, the Claude CLI keychain credential refresh path constructed a shell command to write the updated JSON blob into Keychain via security add-generic-password -w .... Because OAuth tokens are user-controlled data, this created an OS command injection risk. This issue has been fixed in version 2026.2.14.