CVE-2026-26320

HIGH EPSS 34.1%
Published Feb 19, 20264mo ago · Modified Feb 20, 20264mo ago
7.1 CVSS 4.0
High
Find Similar
Published Feb 19, 2026 4mo ago
Last Modified Feb 20, 2026 4mo ago

Description

OpenClaw is a personal AI assistant. OpenClaw macOS desktop client registers the `openclaw://` URL scheme. For `openclaw://agent` deep links without an unattended `key`, the app shows a confirmation dialog that previously displayed only the first 240 characters of the message, but executed the full message after the user clicked "Run." At the time of writing, the OpenClaw macOS desktop client is still in beta. In versions 2026.2.6 through 2026.2.13, an attacker could pad the message with whitespace to push a malicious payload outside the visible preview, increasing the chance a user approves a different message than the one that is actually executed. If a user runs the deep link, the agent may perform actions that can lead to arbitrary command execution depending on the user's configured tool approvals/allowlists. This is a social-engineering mediated vulnerability: the confirmation prompt could be made to misrepresent the executed message. The issue is fixed in 2026.2.14. Other mitigations include not approve unexpected "Run OpenClaw agent?" prompts triggered while browsing untrusted sites and usingunattended deep links only with a valid `key` for trusted personal automations.

CVSS Details

Base Score
7.1
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction P
Scope X

Threat Intelligence

EPSS Exploit Probability
34.1% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-451

Affected Products 2

VendorProductVersionRange
openclawopenclaw*≥2026.2.6  –  <2026.2.14
applemacos*any

References 3

  • github.com https://github.com/openclaw/openclaw/commit/28d9dd7a772501ccc3f71457b4adfee79084fe6f
    Patch
  • github.com https://github.com/openclaw/openclaw/releases/tag/v2026.2.14
    ProductRelease Notes
  • github.com https://github.com/openclaw/openclaw/security/advisories/GHSA-7q2j-c4q5-rm27
    MitigationPatchVendor Advisory

Remediation

  • github.com https://github.com/openclaw/openclaw/commit/28d9dd7a772501ccc3f71457b4adfee79084fe6f
    Patch
  • github.com https://github.com/openclaw/openclaw/security/advisories/GHSA-7q2j-c4q5-rm27
    MitigationPatchVendor Advisory