CVE-2026-27576: OpenClaw: ACP prompt-size checks missing in local stdio bridge could reduce responsiveness with very large inputs

  • Local ACP sessions may become less responsive when very large prompts are submitted
  • Larger-than-expected model usage/cost when oversized text is forwarded
  • No privilege escalation and no direct remote attack path in the default ACP model

References

Code Behaviors & Features

Detect and mitigate CVE-2026-27576 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →