What is the CVSS score of CVE-2026-27576?

CVE-2026-27576 has a CVSS 3.1 base score of 4.0 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L. EPSS exploitation probability: 0.0%.

Which versions of AI / ML are affected by CVE-2026-27576?

Organizations using OpenClaw should be aware of moderate risk from CVE-2026-27576, a resource exhaustion vulnerability rated CVSS 4.0. Service availability could be impacted.. A patch is available.

How to fix or mitigate CVE-2026-27576?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Vendor patch is available.

AI / ML CVE-2026-27576

MEDIUM

Uncontrolled Resource Consumption (CWE-400)

2026-02-21 security-advisories@github.com

GHSA-cxpw-2g23-2vgw

Denial Of Service AI / ML Openclaw

4.0

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

4.0 MEDIUM

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

Low

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:04 vuln.today

Patch released

Feb 23, 2026 - 20:39 nvd

Patch available

CVE Published

Feb 21, 2026 - 10:16 nvd

MEDIUM 4.0

DescriptionGitHub Advisory

OpenClaw is a personal AI assistant. In versions 2026.2.17 and below, the ACP bridge accepts very large prompt text blocks and can assemble oversized prompt payloads before forwarding them to chat.send. Because ACP runs over local stdio, this mainly affects local ACP clients (for example IDE integrations) that send unusually large inputs. This issue has been fixed in version 2026.2.19.

AnalysisAI

OpenClaw versions 2026.2.17 and earlier fail to enforce payload size limits in the ACP bridge, allowing local clients to trigger denial of service through excessively large prompt inputs that consume system resources. This vulnerability primarily impacts IDE integrations and other local ACP clients that may inadvertently send oversized text blocks. The issue has been patched in version 2026.2.19.

Technical ContextAI

Classified as CWE-400 (Uncontrolled Resource Consumption). Affects Openclaw. OpenClaw is a personal AI assistant. In versions 2026.2.17 and below, the ACP bridge accepts very large prompt text blocks and can assemble oversized prompt payloads before forwarding them to chat.send. Because ACP runs over local stdio, this mainly affects local ACP clients (for example IDE integrations) that send unusually large inputs. This issue has been fixed in version 2026.2.19.