Openclaw cli: OpenClaw: Shell positional parameters could weaken strict inline-eval checks (CVE-2026-53855)

CVE-2026-53855 in openclaw-cli involves a weakness where shell positional parameters can bypass strict inline-eval checks. This occurs when a command request combines allowlisted tools with shell positional arguments, potentially placing inline-eval content in a shell carrier not covered by the strict check. The vulnerability depends on the operator's configuration and whether lower-trust input can reach the vulnerable path. The trusted-operator model remains unchanged. The first stable patched version is 2026.4.2.

If the affected feature is enabled and reachable, an attacker could execute shell-provided content outside the intended allowlist rules, potentially leading to high confidentiality and integrity impact. The practical impact depends on the operator's configuration and input trust boundaries. There is no known exploitation in the wild at this time.

A patch is available in version 2026.4.2 and should be applied. Until patched, avoid allowlisting shell carrier patterns and require approval for shell wrappers. Additionally, keep channel and tool allowlists narrow, avoid sharing one Gateway between mutually untrusted users, and disable the affected feature if not needed.