Beveiligingsadvies

CVE-2026-53842

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-16 18:04:54

Laatst bijgewerkt 2026-06-18 03:55:33

Toegewezen door VulnCheck

CVSS-score 7.1

Status PUBLISHED

Beschrijving

OpenClaw before 2026.5.2 contains an environment variable injection vulnerability allowing workspace .env files to influence Python runtime selection through CLOUDSDK_PYTHON during Gmail setup gcloud execution. Attackers with repository access can manipulate the CLOUDSDK_PYTHON variable to execute setup through unintended local Python paths, potentially enabling arbitrary code execution.

← Alle CVE's bekijken Bekijk op cve.org ↗