CVE-2026-27002: OpenClaw Docker Container Escape via Unvalidated Bind Mount Config Injection
Summary
CVE-2026-27002: OpenClaw: Docker container escape via unvalidated bind mount config injection. Affects openclaw versions < 2026.2.15. Fixed in 2026.2.15. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenClaw is an npm package designed to facilitate the management of Docker containers in a sandboxed environment. It allows users to configure various settings for container execution, including network settings and resource bindings. However, a recent vulnerability has been identified that could allow malicious configurations to escape the container's isolation, posing significant security risks.
Vulnerability Detail
The vulnerability arises from a configuration injection issue within the Docker tool sandbox of OpenClaw. This flaw permits the application of dangerous Docker options such as bind mounts, host networking, and unconfined profiles. If an attacker can manipulate the Docker configuration, they could potentially mount sensitive host paths, bypass network isolation, or weaken security profiles, leading to host secret exfiltration or complete control over the host system.
How To Fix
Latest published version: 2026.10.6 as of 22 Oct 2026
npm install openclaw@2026.10.6Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
2026.2.15
This is the first release that contains the fix.
npm install openclaw@2026.2.15Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, avoid configuring 'agents..sandbox.docker.binds' to mount system directories or Docker socket paths. Additionally, keep 'agents..sandbox.docker.network' set to 'none' (default) or 'bridge', and refrain from using 'unconfined' for seccomp or AppArmor profiles.
Conclusion
The OpenClaw vulnerability (CVE-2026-27002) presents a significant risk due to its potential for Docker container escape and host data access. Users are strongly advised to update to the patched version or implement the provided workarounds to safeguard their systems.
See every vulnerability recorded for openclaw →
FAQ
The CVSS score of this vulnerability is 7.7, indicating a high severity level.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
Bind mounts allow you to mount a host directory into a container. If misconfigured, they can expose sensitive host files to the container, leading to potential data breaches.
If you cannot update immediately, implement the recommended workarounds to mitigate the risk until you can apply the patch.
Exposing the Docker socket can allow an attacker to control Docker itself, potentially leading to full host compromise.
References
Related vulnerabilities
Recent vulnerabilities recorded for openclaw.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.