Security Advisory

CVE-2026-53865

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-16 18:05:10
Last updated 2026-06-18 03:56:08
Assigner VulnCheck
CVSS score 7.2
State PUBLISHED

Description

OpenClaw before 2026.5.2 contains a path traversal vulnerability in maintenance task execution that allows workspace-derived service paths to influence trash command selection. Attackers can execute unintended local executables from operator-unintended paths during maintenance operations by manipulating workspace-derived environment paths.