CVE-2026-53822
HIGH
NVD
CVSS Score
8.8
Severity
HIGH
Published
Jun 12, 2026
Vendor
unknown
Description
OpenClaw before 2026.5.18 contains a command injection vulnerability where shell wrapper argv could change between approval and execution. Attackers can rebuild command arguments after allowlist approval to execute unapproved command shapes, potentially bypassing security controls.