PT-2026-48749 · Openclaw · Openclaw
CVE-2026-53819
·
Published
2026-06-11
·
Updated
2026-07-02
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
OpenClaw versions prior to 2026.5.27
Description
An arbitrary code execution issue exists in skill install flows. This occurs because workspace
.env files can override the Homebrew executable selection, allowing attackers with access to trusted operator workspaces to execute unintended Homebrew-compatible executables during skill setup to compromise the system.Recommendations
Update to version 2026.5.27.
Exploit
Fix
Untrusted Search Path
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Openclaw