CVE-2026-27002 is a critical (CVSS 9.8) configuration injection in the OpenClaw Docker tool sandbox before version 2026.2.15. Dangerous Docker options such as bind mounts, host networking and unconfined profiles could be applied, enabling container escape or host data access. Upgrade to 2026.2.15.
What's affected
OpenClaw, a personal AI assistant, in versions before 2026.2.15. The release adds blocks on dangerous sandbox Docker settings, runtime enforcement when building docker create arguments, config schema checks for network host, seccompProfile unconfined and apparmorProfile unconfined, and security audit findings for dangerous sandbox settings.
How to check if you're exposed
Check your OpenClaw version against 2026.2.15. Then review your configuration for the sandbox Docker keys the advisory names:
- agents.*.sandbox.docker.binds that mount system directories or the Docker socket
- agents.*.sandbox.docker.network set to anything other than none or bridge
- unconfined values for the seccomp or AppArmor profiles
Any of these on an older version is the exposure the advisory describes.
What to do now
- Upgrade OpenClaw to 2026.2.15 or later.
- Remove bind mounts of system directories and Docker socket paths from sandbox settings.
- Keep the sandbox network at none, the default, or bridge.
- Do not use unconfined for seccomp or AppArmor profiles.
- Run the new security audit findings after upgrading and fix what they flag.
Why it matters
The record lists CWE-250, execution with unnecessary privileges. A sandbox exists to limit what code can touch. If a configuration can add host mounts, host networking or disabled profiles, the boundary no longer holds, and anything running inside can reach the host.
Tools that run model driven code need that boundary to hold by default. The fix enforces limits at runtime, not only in the config schema. The record does not mark this CVE as known exploited.
Quick check
What is the quickest mitigation if I cannot upgrade today?
The advisory says to avoid risky binds, keep the sandbox network at none or bridge and never use unconfined security profiles.
Sources
- CVE-2026-27002 on Gold
- Release listed in the record: https://github.com/openclaw/openclaw/releases/tag/v2026.2.15
- GitHub advisory listed in the record: https://github.com/openclaw/openclaw/security/advisories/GHSA-w235-x559-36mg
Last reviewed: 19 October 2026.
