Is CVE-2026-27001 actively exploited?

No active exploitation of CVE-2026-27001 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-27001 be exploited remotely?

No. CVE-2026-27001 requires local access to exploit.

What is the CVSS score of CVE-2026-27001?

CVE-2026-27001 has a CVSS score of 7.8 (HIGH) and an EPSS exploitation probability of 0.02%.

HOME VULNERABILITIESCVE-2026-27001

HIGH

CVE-2026-27001

CWE-77Published: February 20, 2026· Updated: Feb 20, 2026

7.8

CVSS v3.1

EPSS:0.02%probability of exploitation in 30 daysPercentile:4.5th

Official Description

OpenClaw is a personal AI assistant. Prior to version 2026.2.15, OpenClaw embedded the current working directory (workspace path) into the agent system prompt without sanitization. If an attacker can cause OpenClaw to run inside a directory whose name contains control/format characters (for example newlines or Unicode bidi/zero-width markers), those characters could break the prompt structure and inject attacker-controlled instructions. Starting in version 2026.2.15, the workspace path is sanitized before it is embedded into any LLM prompt output, stripping Unicode control/format characters and explicit line/paragraph separators. Workspace path resolution also applies the same sanitization as defense-in-depth.

NVD Source

Technical Analysis

CVE-2026-27001 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.8.