OpenClaw versions prior to 2026.4.22 have a vulnerability in their exec allowlist analysis that permits shell expansion within unquoted heredoc bodies. This flaw allows attackers to bypass command allowlist validation by embedding shell expansion tokens, enabling execution of unauthorized commands at runtime. The vulnerability has a high severity rating with a CVSS score of 8.8.