A vulnerability described as critical has been identified in OpenClaw, Clawdbot and Moltbot up to 2026.2.14. Affected is an unknown function of the component Setting Handler. The manipulation results in execution with unnecessary privileges.
This vulnerability is identified as CVE-2026-27002. The attack can be executed remotely. There is not any exploit available.
Upgrading the affected component is recommended.