Vulnerability DatabaseCVE-2026-27487

CVE-2026-27487:
Homebrew vulnerability analysis and mitigation

OpenClaw is a personal AI assistant. In versions 2026.2.13 and below, when using macOS, the Claude CLI keychain credential refresh path constructed a shell command to write the updated JSON blob into Keychain via security add-generic-password -w .... Because OAuth tokens are user-controlled data, this created an OS command injection risk. This issue has been fixed in version 2026.2.14.

Source: NVD

View vulnerable instances

Not a customer? See how Wiz maps CVEs like this one to real cloud attack paths.

Watch 12-min demo

8

Score

Published February 21, 2026

Severity HIGH

CNA Score 7.6

Affected Technologies

Homebrew
OpenClaw (formerly Moltbot or Clawdbot)

Has Public Exploit No

Has CISA KEV Exploit No

CISA KEV Release Date N/A

CISA KEV Due Date N/A

Exploitation Probability Percentile (EPSS) 81.8

Exploitation Probability (EPSS) 2.1

Affected packages and libraries

openclaw

Sources

NVD
GitHub Advisory Database
- npm Severity HIGHHas FixAdded at: Feb 21, 2026
Homebrew
- Homebrew Severity HIGHHas FixAdded at: Feb 24, 2026
Nix
- Nix Severity HIGHHas FixAdded at: Aug 10, 2026

Get a CVE risk assessment

Get a prioritized view of CVEs in your cloud—so you can focus on what's exploitable, not just what's listed.

Request assessment

Related Homebrew vulnerabilities:

CVE ID	Severity	Score	Technologies	Component name	CISA KEV exploit	Has fix	Published date
CVE-2026-112390	HIGH	8.2	Python	open-webui	No	Yes	Oct 19, 2026
CVE-2026-14511	MEDIUM	6.5	IBM WebSphere MQ	cpe:2.3:a:ibm:mq	No	No	Oct 19, 2026
CVE-2026-112778	MEDIUM	6.4	NixOS	traefik	No	Yes	Oct 19, 2026
CVE-2026-112391	MEDIUM	6.3	Python	nemo-gym	No	Yes	Oct 19, 2026
CVE-2026-111678	MEDIUM	4.8	NixOS	antiword	No	No	Oct 16, 2026