CVE-2026-27002: OpenClaw: Docker container escape via unvalidated bind mount config injection
(updated )
A configuration injection issue in the Docker tool sandbox could allow dangerous Docker options (bind mounts, host networking, unconfined profiles) to be applied, enabling container escape or host data access.
References
- github.com/advisories/GHSA-w235-x559-36mg
- github.com/openclaw/openclaw
- github.com/openclaw/openclaw/commit/887b209db47f1f9322fead241a1c0b043fd38339
- github.com/openclaw/openclaw/releases/tag/v2026.2.15
- github.com/openclaw/openclaw/security/advisories/GHSA-w235-x559-36mg
- nvd.nist.gov/vuln/detail/CVE-2026-27002
Code Behaviors & Features
Detect and mitigate CVE-2026-27002 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →