Threats tagged 'ghsa-vxx3-6hc9-7cc3'

OpenClaw CLI versions prior to 2026.5.12 contain a vulnerability where combined POSIX shell options can cause confusion during exec revalidation. This may lead to inline shell commands executing without proper allowlist approval. The issue affects configurations where the feature is enabled and reachable, potentially allowing unintended command execution depending on operator setup. The vulnerability does not alter the trusted-operator model of OpenClaw. A fix is available in version 2026.5.12.