CVE-2026-53806

HIGH

8.8

CVSS Severity Score

EPSS Score0.1180%

EPSS Percentile0.85th

Published2026年6月11日

Last Modified2026年6月12日

Vulnerability Description

OpenClaw before 2026.5.12 contains a shell option parsing vulnerability that allows combined POSIX shell flags to bypass exec revalidation checks. Attackers can exploit this by using combined shell options to execute inline shell content without intended allowlist validation, potentially enabling unauthorized command execution when the affected feature is enabled.

Affected Platforms (CPE)

No CPE configurations currently published for this record.

References & Advisories

🔗 https://github.com/openclaw/openclaw/security/advisories/GHSA-vxx3-6hc9-7cc3

🔗 https://www.vulncheck.com/advisories/openclaw-shell-option-parsing-bypass-in-exec-revalidation

Vulnerability Description

Affected Platforms (CPE)

References & Advisories

相关漏洞威胁