CVE-2026-27001

OpenClaw (npm package) before version 2026.2.15 embeds the current working directory (workspace path) into the agent system prompt without sanitization. If the directory name contains control/format characters (e.g., newlines, Unicode bidi/zero-width markers), an attacker could craft inputs to br...