CVE-2026-27009 — MEDIUM (5.8)

Vulnerability Description

OpenClaw is a personal AI assistant. Prior to version 2026.2.15, a atored XSS issue in the OpenClaw Control UI when rendering assistant identity (name/avatar) into an inline `<script>` tag without script-context-safe escaping. A crafted value containing `</script>` could break out of the script tag and execute attacker-controlled JavaScript in the Control UI origin. Version 2026.2.15 removed inline script injection and serve bootstrap config from a JSON endpoint and added a restrictive Content Security Policy for the Control UI (`script-src 'self'`, no inline scripts).

CVSS Score

5.8

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

NONE

Affected Products

Vendor	Product	Versions
Openclaw	Openclaw	< 2026.2.15

Related Weaknesses (CWE)

CWE-79

References

https://github.com/openclaw/openclaw/commit/3b4096e02e7e335f99f5986ec1bd566e90b1Patch
https://github.com/openclaw/openclaw/commit/adc818db4a4b3b8d663e7674ef2043694751Patch
https://github.com/openclaw/openclaw/releases/tag/v2026.2.15ProductRelease Notes
https://github.com/openclaw/openclaw/security/advisories/GHSA-37gc-85xm-2ww6ExploitVendor AdvisoryPatch

FAQ

What is CVE-2026-27009?

CVE-2026-27009 is a vulnerability with a CVSS score of 5.8 (MEDIUM). OpenClaw is a personal AI assistant. Prior to version 2026.2.15, a atored XSS issue in the OpenClaw Control UI when rendering assistant identity (name/avatar) into an inline `<script>` tag without scr...

How severe is CVE-2026-27009?

CVE-2026-27009 has been rated MEDIUM with a CVSS base score of 5.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-27009?

Check the references section above for vendor advisories and patch information. Affected products include: Openclaw Openclaw.