Openclaw cli: OpenClaw: Workspace-derived service PATH could influence trash command selection (CVE-2026-53865)

The vulnerability in openclaw-cli (CVE-2026-53865) arises from the use of a workspace-derived environment PATH that can influence which 'trash' executable is selected during maintenance operations. This can lead to execution of an unintended local executable if the operator's configuration permits lower-trust input to affect the PATH. The issue is scoped to the named feature and configuration and does not affect the overall trusted-operator model. The vulnerability is present in versions >=2026.1.29 and <2026.5.2 and is addressed in version 2026.5.2.

If the affected feature is enabled and reachable, an attacker or lower-trust input could cause the system to run a local executable not intended by the operator during maintenance tasks. This could lead to high confidentiality and integrity impact, as indicated by the CVSS score of 7.1. The practical impact depends on the operator's configuration and whether untrusted input can influence the PATH.

A patch is available in version 2026.5.2. Until patched, operators should keep maintenance flows on trusted workspaces and fixed service paths. Additionally, it is recommended to keep channel and tool allowlists narrow, avoid sharing one Gateway between mutually untrusted users, and disable the affected feature when it is not needed.