{"data":{"id":"54c4d5a1-692e-4c7b-acb9-53e36ff7839c","title":"GHSA-w235-x559-36mg: OpenClaw: Docker container escape via unvalidated bind mount config injection","summary":"The openclaw npm package, in versions up to and including 2026.2.14, lets dangerous Docker options be applied to its Docker tool sandbox through unvalidated configuration injection. An attacker who can influence sandbox Docker configuration, or an operator who pastes untrusted config, can mount sensitive host paths, set network=host, or use unconfined seccomp or AppArmor profiles. This can lead to host secret exfiltration or full host control via Docker socket exposure. The fixed version is 2026.2.15 (next release).","solution":"Fixed in >= 2026.2.15 (next release): OpenClaw now blocks dangerous sandbox Docker settings through runtime enforcement when building docker create args, config-schema validation for network=host, seccompProfile=unconfined and apparmorProfile=unconfined, and security audit findings for dangerous sandbox docker config. Workarounds: do not configure agents.*.sandbox.docker.binds to mount system directories or Docker socket paths, keep agents.*.sandbox.docker.network at none (default) or bridge, and do not use unconfined for seccomp or AppArmor profiles.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-w235-x559-36mg","publishedAt":"2026-02-18T22:42:42.000Z","cveId":"CVE-2026-27002","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["openclaw@< 2026.2.15 (fixed: 2026.2.15)"],"affectedPackageNames":["openclaw"],"affectedPackageRefs":["npm:openclaw"],"affectedVendors":[],"affectedVendorsRaw":["OpenClaw"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00528,"epssCheckedAt":"2026-11-04T06:10:14.970Z","kevDateAdded":null,"advisoryAliases":["GHSA-w235-x559-36mg"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":null,"fixReleasedAt":"2026-02-16T03:56:42.422Z","daysToFix":-2,"fixCheckedAt":"2026-10-29T21:40:52.496Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"openclaw","fixedVersion":"2026.2.15","matchedVersion":"2026.2.15","fixReleasedAt":"2026-02-16T03:56:42.422Z","daysToFix":-2,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:40:52.349Z"}]}}