PT-2026-48736

CVE-2026-53806

Published

2026-06-11

Updated

2026-07-02

Description by

CVSS 3.1

8.8

High

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.5.12

Description A shell option parsing issue allows combined POSIX shell flags to bypass exec revalidation checks. This enables attackers to execute inline shell content without the intended allowlist validation, potentially leading to unauthorized command execution when the affected feature is enabled.

Recommendations Update to version 2026.5.12. As a temporary mitigation, disable the affected feature.

Exploitability

Exploit

Fix

Impacts

Researchers

Edward-X

Vendors

Affected products

Weakness enumeration

CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition

Related identifiers