CVE-2026-53819
HIGH
NVD
CVSS Score
8.8
Severity
HIGH
Published
Jun 11, 2026
Vendor
unknown
Description
OpenClaw before 2026.5.27 contains an arbitrary code execution vulnerability in skill install flows where workspace .env files can override the Homebrew executable selection. Attackers with access to trusted operator workspaces can execute unintended Homebrew-compatible executables during skill setup to compromise the system.