---
title: "CVE-2026-28466: OpenClaw Vulnerable to Remote Code Execution via Node Invoke Approval Bypass in Gateway"
url: https://erroneo.us/security/cve/CVE-2026-28466/
description: "CVE-2026-28466 (openclaw (npm)): OpenClaw versions prior to 2026.2.14 contain a vulnerability in the gateway in which it fails to sanitize internal approval…"
type: vulnerability-record
section: "Security Digest"
date_published: 2026-03-05
date_modified: 2026-03-09
publisher: erroneo.us
author: erroneo.us Security Desk
cve: "CVE-2026-28466"
kev: false
cvss: 9.4
epss: 0.00696
license: All rights reserved. Quote with attribution and a link.
---

# CVE-2026-28466: OpenClaw Vulnerable to Remote Code Execution via Node Invoke Approval Bypass in Gateway

**Signal:** Critical, preconditions apply. Severe if exploited, but exploitation needs conditions that may not apply to you. (Computed from CISA KEV, EPSS and CVSS; not an editorial verdict.)

## Should you act?

- No confirmed exploitation. It is not in CISA’s KEV catalog and CISA’s SSVC assessment records no known exploitation. That can change quickly after a public write-up; re-check if you are affected.
- EPSS 0.7% , percentile 52: FIRST’s model estimates a 0.7% chance of exploitation activity in the next 30 days, higher than 52% of all scored CVEs (moderate). EPSS is a probability, not a verdict.
- Needs an account (low (any account)). Exposure depends on who can log in.
- Only applies if your dependency tree includes openclaw (npm) < 2026.2.14, fixed in 2026.2.14 . Check your lockfile, including transitive dependencies.

## What it is

OpenClaw versions prior to 2026.2.14 contain a vulnerability in the gateway in which it fails to sanitize internal approval fields in node.invoke parameters, allowing authenticated clients to bypass exec approval gating for system.run commands. Attackers with valid gateway credentials can inject approval control fields to execute arbitrary commands on connected node hosts, potentially compromising developer workstations and CI runners.

## Affected packages

- npm `openclaw` < 2026.2.14 → fixed: 2026.2.14

## Affected products (CVE record)

- OpenClaw OpenClaw: < 2026.2.14

## Severity

- VulnCheck CVSS 4.0: 9.4 `CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H`
- VulnCheck CVSS 3.1: 9.9 `CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H`
- GitHub CVSS 4.0: 9.4 `CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H`

## Exploitation

- CISA KEV: not listed (no confirmed in-the-wild exploitation known to CISA).
- CISA SSVC assessment: exploitation none , automatable no , technical impact partial .
- FIRST EPSS (model of 2026-10-21): 0.70% probability of exploitation activity in the next 30 days; percentile 52.

## Sources

- [GitHub Security Advisory (GHSA-gv46-4xfq-jv58)](https://github.com/openclaw/openclaw/security/advisories/GHSA-gv46-4xfq-jv58)
- [Patch Commit #1](https://github.com/openclaw/openclaw/commit/318379cdb8d045da0009b0051bd0e712e5c65e2d)
- [Patch Commit #2](https://github.com/openclaw/openclaw/commit/a7af646fdab124a7536998db6bd6ad567d2b06b0)
- [Patch Commit #3](https://github.com/openclaw/openclaw/commit/c1594627421f95b6bc4ad7c606657dc75b5ad0ce)
- [Patch Commit #4](https://github.com/openclaw/openclaw/commit/0af76f5f0e93540efbdf054895216c398692afcd)
- [GitHub Advisory GHSA-gv46-4xfq-jv58](https://github.com/advisories/GHSA-gv46-4xfq-jv58)
- [CVE.org record CVE-2026-28466](https://www.cve.org/CVERecord?id=CVE-2026-28466)
- [NVD entry CVE-2026-28466](https://nvd.nist.gov/vuln/detail/CVE-2026-28466)
- [VulnCheck Advisory: OpenClaw < 2026.2.14 - Remote Code Execution via Node Invoke Approval Bypass](https://www.vulncheck.com/advisories/openclaw-remote-code-execution-via-node-invoke-approval-bypass)

---
Source page: https://erroneo.us/security/cve/CVE-2026-28466/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt