What is the CVSS score of CVE-2026-27545?

CVE-2026-27545 has a CVSS 3.1 base score of 6.1 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L. EPSS exploitation probability: 0.0%.

Which versions of Openclaw are affected by CVE-2026-27545?

CVE-2026-27545 presents moderate security risk rated CVSS 6.1. Exploitation could compromise the security of affected deployments.. A patch is available.

How to fix or mitigate CVE-2026-27545?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Vendor patch is available.

Openclaw CVE-2026-27545

EUVD-2026-12738 MEDIUM

Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)

2026-03-18 VulnCheck

GHSA-f7ww-2725-qvw2

Authentication Bypass Openclaw

6.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.1 MEDIUM

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

Low

Lifecycle Timeline

EUVD ID Assigned

Mar 18, 2026 - 02:30 euvd

EUVD-2026-12738

Analysis Generated

Mar 18, 2026 - 02:30 vuln.today

Patch released

Mar 18, 2026 - 02:30 nvd

Patch available

CVE Published

Mar 18, 2026 - 01:34 nvd

MEDIUM 6.1

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

2 npm packages depend on openclaw (2 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.2.26.

DescriptionCVE.org

OpenClaw versions prior to 2026.2.26 contain an approval bypass vulnerability in system.run execution that allows attackers to execute commands from unintended filesystem locations by rebinding writable parent symlinks in the current working directory after approval. An attacker can modify mutable parent symlink path components between approval and execution time to redirect command execution to a different location while preserving the visible working directory string.

AnalysisAI

OpenClaw versions prior to 2026.2.26 contain a Time-of-Check-Time-of-Use (TOCTOU) approval bypass vulnerability in the system.run execution function that allows local attackers with low privileges to execute arbitrary commands from unintended filesystem locations. An attacker can exploit a race condition by modifying parent symlinks in the current working directory after command approval but before execution, redirecting execution while maintaining the appearance of a safe working directory. A patch is available from the vendor, and this vulnerability has been documented by both VulnCheck and the OpenClaw security advisory (GHSA-f7ww-2725-qvw2).

Technical ContextAI

The vulnerability is rooted in CWE-367 (Time-of-Check-Time-of-Use / TOCTOU Race Condition), a classic class of vulnerabilities where security decisions are made based on filesystem state that can change between the decision point and the actual operation. OpenClaw (affected CPE: cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*) implements an approval mechanism for system.run command execution that validates the intended working directory and command path at approval time. However, because the validation occurs separately from the actual command execution, and because parent directory symlinks in the filesystem are mutable and writable, an attacker with local access can modify these symlinks between the approval check and execution. This allows the actual command execution to occur in a different filesystem location than what was approved, while the displayed working directory string remains unchanged, effectively bypassing the intended authorization controls.

RemediationAI

Upgrade OpenClaw to version 2026.2.26 or later immediately, as patches are available from the vendor. The fix has been implemented across multiple commits (78a7ff2d50fb3bcef351571cb5a0f21430a340c1, d82c042b09727a6148f3ca651b254c4a677aff26, d06632ba45a8482192792c55d5ff0b2e21abb0a7, 4e690e09c746408b5e27617a20cb3fdc5190dbda, and 4b4718c8dfce2e2c48404aa5088af7c013bed60b) as referenced on GitHub. Until patching is possible, restrict local filesystem access to OpenClaw processes to trusted users only, implement filesystem monitoring to detect suspicious symlink modifications in working directories, and review system.run approval logs for signs of exploitation. Consult the official vendor security advisory at https://www.vulncheck.com/advisories/openclaw-approval-bypass-via-parent-symlink-current-working-directory-rebind for additional context and validation of the fix.