CVE-2026-42423
HIGH
NVD
CVSS Score
7.5
Severity
HIGH
Published
Apr 28, 2026
Vendor
unknown
Description
OpenClaw before 2026.4.8 contains an approval-timeout fallback mechanism that bypasses strictInlineEval explicit-approval requirements on gateway and node exec hosts. Attackers can exploit this timeout fallback to execute inline eval commands that should require explicit user approval, circumventing the intended security boundary.