CVE-2026-28484: OpenClaw 2026.2.15 - Option Injection in pre-commit Hook via Malicious Filenames
Published Mar 5, 2026
·Updated
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Affected Software
1 affected component
OpenClaw OpenClaw<2026.2.15
Event History
Mar 5, 2026
CVE Published
via MITRE·09:59 PM
Rejected
via MITRE·09:59 PM
Data Sourced
via NVD·10:16 PM
Description
Mar 6, 2026
Rejected
via MITRE·04:45 PM
Frequently Asked Questions
1
What is the severity of CVE-2026-28484?
CVE-2026-28484 has been rejected and does not have a severity rating.
2
How do I fix CVE-2026-28484?
There is no fix required for CVE-2026-28484 as it has been withdrawn.
3
What software is affected by CVE-2026-28484?
CVE-2026-28484 affected OpenClaw version 2026.2.15 and earlier.
4
What type of vulnerability is CVE-2026-28484?
CVE-2026-28484 describes an option injection vulnerability related to pre-commit hooks.
5
Is CVE-2026-28484 actively being exploited?
Since CVE-2026-28484 has been rejected, it is not applicable for exploitation.