Critical severity · published Mar 5, 2026
CVE-2026-28466
OpenClaw < 2026.2.14 - Remote Code Execution via Node Invoke Approval Bypass
9.9
CVSS
0.4%
EPSS
No
On KEV
Description
OpenClaw versions prior to 2026.2.14 contain a vulnerability in the gateway in which it fails to sanitize internal approval fields in node.invoke parameters, allowing authenticated clients to bypass exec approval gating for system.run commands. Attackers with valid gateway credentials can inject approval control fields to execute arbitrary commands on connected node hosts, potentially compromising developer workstations and CI runners.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 39% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
OpenClaw · OpenClaw
before 2026.2.14 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-28466
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-28466
Patch
https://github.com/openclaw/openclaw/commit/0af76f5f0e93540efbdf054895216c398692afcd
Broken Link
https://github.com/openclaw/openclaw/commit/318379cdb8d045da0009b0051bd0e712e5c65e2d
Broken Link
https://github.com/openclaw/openclaw/commit/a7af646fdab124a7536998db6bd6ad567d2b06b0
Broken Link
https://github.com/openclaw/openclaw/commit/c1594627421f95b6bc4ad7c606657dc75b5ad0ce
Mitigation
https://github.com/openclaw/openclaw/security/advisories/GHSA-gv46-4xfq-jv58
Third Party Advisory
https://www.vulncheck.com/advisories/openclaw-remote-code-execution-via-node-invoke-approval-bypass
More from OpenClaw
9.9
CVE-2026-41329
OpenClaw < 2026.3.31 - Sandbox Bypass via Heartbeat Context Inheritance and senderIsOwner Escalation
9.9
CVE-2026-33579
OpenClaw < 2026.3.28 - Privilege Escalation via Missing Caller Scope Validation in Device Pair Approval
9.9
CVE-2026-32922
OpenClaw < 2026.3.11 - Privilege Escalation via Unvalidated Scope in device.token.rotate
9.9
CVE-2026-32048
OpenClaw < 2026.3.1 - Sandbox Escape via Cross-Agent sessions_spawn
9.9
CVE-2026-22172
OpenClaw < 2026.3.12 - Scope Elevation in WebSocket Shared-Auth Connections