Security Advisory

CVE-2026-53822

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-12 21:56:50
Last updated 2026-06-15 18:26:06
Assigner VulnCheck
CVSS score 8.7
State PUBLISHED

Description

OpenClaw before 2026.5.18 contains a command injection vulnerability where shell wrapper argv could change between approval and execution. Attackers can rebuild command arguments after allowlist approval to execute unapproved command shapes, potentially bypassing security controls.