CVE-2026-27487 json
OpenClaw: Prevent shell injection in macOS keychain credential write
published 2026-02-18 8 mo ago modified 2026-06-17 4 mo ago also EUVD-2026-7712 , GHSA-4564-pvr2-qq4h
- cvss
- 7.6
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.4%
- EPSS 1.4% chance of exploitation in 30 days, percentile 72%
- public exploits
- 0
- none known
Summary
OpenClaw is a personal AI assistant. In versions 2026.2.13 and below, when using macOS, the Claude CLI keychain credential refresh path constructed a shell command to write the updated JSON blob into Keychain via security add-generic-password -w .... Because OAuth tokens are user-controlled data, this created an OS command injection risk. This issue has been fixed in version 2026.2.14.
Patch / fix
- npm openclaw 2026.2.14
- openclaw openclaw 2026.2.14
- github.com/openclaw/openclaw@66d7178 commit
- github.com/openclaw/openclaw@9dce3d8 commit
- github.com/openclaw/openclaw@b908388 commit
- github.com/openclaw/openclaw#15924 pull request
- github.com/openclaw/openclaw/releases/tag/v2026.2.14 release
- github.com/openclaw/openclaw/security/advisories/GHSA-4564-pvr2-qq4h advisory
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- total
- Assessed
- 8 mo ago
Exploit prediction
1.37% chance of exploitation in the next 30 days, higher than 72% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 7.6 | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L |
| GitHub | 3.1 | 7.6 | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L |
| NVD | 3.1 | 8.0 | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| npm | openclaw | <2026.2.14 |
2026.2.14 |
Affected products
- openclaw openclaw
Classification
- Weakness
-
- CWE-78 Improper Neutralization of Special Elements used in an OS Command
References
-
github.com
/openclaw/openclaw/pull/15924
web, issue-tracking
-
github.com
/openclaw/openclaw/commit/66d7178f2d6f9d60abad35797f97f3e61389b70c
web, patch
-
github.com
/openclaw/openclaw/commit/9dce3d8bf83f13c067bc3c32291643d2f1f10a06
web, patch
-
github.com
/openclaw/openclaw/commit/b908388245764fb3586859f44d1dff5372b19caf
web, patch
-
github.com
/openclaw/openclaw/security/advisories/GHSA-4564-pvr2-qq4h
web, patch, vendor-advisory
-
github.com
/openclaw/openclaw/releases/tag/v2026.2.14
web, release-notes
-
nvd.nist.gov
/vuln/detail/CVE-2026-27487
advisory
-
github.com
/openclaw/openclaw
package
Sources
- CVE List CVE-2026-27487
- GitHub Advisory GHSA-4564-pvr2-qq4h
- NVD CVE-2026-27487
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.
CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.