CVE-2026-53822
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk57th percentile - higher than 57% of all known CVEs
Summary
OpenClaw before 2026.5.18 contains a command injection vulnerability where shell wrapper argv could change between approval and execution. Attackers can rebuild command arguments after allowlist approval to execute unapproved command shapes.
Risk Assessment
This vulnerability could allow attackers to bypass security controls and execute unauthorized actions within the system, posing a significant threat to the integrity and security of the organization.
Recommendation
It is recommended to update OpenClaw to version 2026.5.18 or later to mitigate this vulnerability and to review system security to minimize risk.
Original NVD description (English source)
OpenClaw before 2026.5.18 contains a command injection vulnerability where shell wrapper argv could change between approval and execution. Attackers can rebuild command arguments after allowlist approval to execute unapproved command shapes, potentially bypassing security controls.