Which versions of Prototype Pollution are affected by CVE-2026-27524?

CVE-2026-27524 is a low-severity vulnerability (CVSS 2.3). The limited severity suggests constrained impact, typically requiring specific conditions or local access for exploitation.. A patch is available.

How to fix or mitigate CVE-2026-27524?

During next maintenance window: Apply vendor patches when convenient. Vendor patch is available.

Prototype Pollution CVE-2026-27524

Q: What is the CVSS score of CVE-2026-27524?

CVE-2026-27524 has a CVSS 4.0 base score of 2.3 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-12736 LOW

Improperly Controlled Modification of Object Prototype Attributes (Prototype Pollution) (CWE-1321)

2026-03-18 VulnCheck

GHSA-62f6-mrcj-v8h5

Authentication Bypass Prototype Pollution

2.3

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

2.3 LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

EUVD ID Assigned

Mar 18, 2026 - 02:30 euvd

EUVD-2026-12736

Analysis Generated

Mar 18, 2026 - 02:30 vuln.today

Patch released

Mar 18, 2026 - 02:30 nvd

Patch available

CVE Published

Mar 18, 2026 - 01:34 nvd

LOW 2.3

DescriptionCVE.org

OpenClaw versions prior to 2026.2.21 accept prototype-reserved keys in runtime /debug set override object values, allowing prototype pollution attacks. Authorized /debug set callers can inject __proto__, constructor, or prototype keys to manipulate object prototypes and bypass command gate restrictions.

AnalysisAI

OpenClaw versions prior to 2026.2.21 are vulnerable to prototype pollution attacks via the /debug set endpoint, allowing authenticated attackers to inject reserved prototype keys (__proto__, constructor, prototype) and manipulate object prototypes to bypass command gate restrictions. The vulnerability requires authenticated access and has relatively low real-world exploitability due to high attack complexity, but presents a meaningful integrity risk for authorized users who may not be aware of this attack vector. A patch is available from the vendor.

Technical ContextAI

The vulnerability is a prototype pollution flaw (CWE-1321) affecting OpenClaw's runtime /debug set override functionality. When handling override object values at the /debug set endpoint, the application fails to sanitize or block prototype-reserved keys that are fundamental to JavaScript object model manipulation. An attacker with authenticated access can inject __proto__, constructor, or prototype keys into runtime objects, allowing them to modify the prototype chain of base objects and inject malicious properties that affect all downstream object instances. This enables bypassing security controls such as command gate restrictions that may be implemented through prototype-based access checks. The CPE identifier cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:* confirms the affected product scope across all versions prior to 2026.2.21.

RemediationAI

Upgrade OpenClaw to version 2026.2.21 or later immediately. The patch is available from the vendor's GitHub repository and should be applied to all affected instances. Until patching can be completed, restrict access to the /debug endpoint to only the minimum necessary authenticated users, disable the /debug endpoint entirely if not required for production operations, and monitor access logs for suspicious /debug set calls containing prototype-reserved keys such as __proto__, constructor, or prototype. Implement additional access controls at the network level to limit which systems can reach the /debug endpoint. See the vendor advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-62f6-mrcj-v8h5 for detailed patching instructions.