CVE-2026-27002

CVE-2026-27002 is a critical configuration injection vulnerability in OpenClaw, a personal AI assistant, affecting versions prior to 2026.2.15. This flaw allows dangerous Docker options, such as bind mounts, host networking, or unconfined profiles, to be applied within the Docker tool sandbox, potentially leading to container escape or unauthorized host data access. With a CVSS score of 9.8 (CRITICAL), it is easily exploitable over the network without user interaction, enabling complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, public exploit code, or inclusion in the KEV catalog, the vulnerability has garnered significant community discussion, indicating awareness and potential future exploitation.