{"id":"EUVD-2026-36610","enisaUuid":"1effd261-5ab1-3bab-b102-9e3b2061b609","description":"OpenClaw before 2026.5.18 contains a command injection vulnerability where shell wrapper argv could change between approval and execution. Attackers can rebuild command arguments after allowlist approval to execute unapproved command shapes, potentially bypassing security controls.","datePublished":"Jun 12, 2026, 9:56:50 PM","dateUpdated":"Sep 17, 2026, 5:54:17 PM","baseScore":8.7,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/openclaw/openclaw/security/advisories/GHSA-2j8v-hwgc-x698\nhttps://www.vulncheck.com/advisories/openclaw-command-argument-modification-via-shell-wrapper-between-approval-and-execution\n","aliases":"CVE-2026-53822\nGHSA-8v2r-mv47-wxfr\n","assigner":"VulnCheck","epss":1.08,"enisaIdProduct":[{"id":"7cd528aa-010f-3db8-b073-edb6673807b0","product":{"name":"OpenClaw","vendor":{"name":"n/a"}},"product_version":"0 \u003c2026.5.18"}],"enisaIdVendor":[{"id":"f4c3c9f8-5219-31f2-9a55-58eb1af17d98","vendor":{"name":"OpenClaw"}}],"enisaIdVulnerability":[{"id":"336ec25b-e593-3f5a-9b1c-5f2d055c8ff8","vulnerability":{"id":"CVE-2026-53822","description":"OpenClaw before 2026.5.18 contains a command injection vulnerability where shell wrapper argv could change between approval and execution. Attackers can rebuild command arguments after allowlist approval to execute unapproved command shapes, potentially bypassing security controls.","datePublished":"Jun 12, 2026, 9:56:50 PM","dateUpdated":"Sep 17, 2026, 5:54:17 PM","status":"PUBLISHED","baseScore":8.7,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/openclaw/openclaw/security/advisories/GHSA-2j8v-hwgc-x698\nhttps://www.vulncheck.com/advisories/openclaw-command-argument-modification-via-shell-wrapper-between-approval-and-execution\n","enisa_id":"EUVD-2026-36610\n","assigner":"VulnCheck","epss":1.08,"dataProcessed":"Nov 11, 2026, 7:22:01 AM","vulnerabilityProduct":[{"id":"75e76100-d0ca-3e82-9aba-4f4c10a9e488","product":{"name":"OpenClaw","vendor":{"name":"n/a"}},"product_version":"0 \u003c2026.5.18"}],"vulnerabilityVendor":[{"id":"898b87e4-1632-3219-8c93-0494ed8b6712","vendor":{"name":"OpenClaw"}}]}},{"id":"db1639be-5258-3bfb-a1b9-67d1409a294e","vulnerability":{"id":"GHSA-8v2r-mv47-wxfr","description":"OpenClaw before 2026.5.18 contains a command injection vulnerability where shell wrapper argv could change between approval and execution. Attackers can rebuild command arguments after allowlist approval to execute unapproved command shapes, potentially bypassing security controls.","datePublished":"Jun 13, 2026, 12:34:31 AM","dateUpdated":"Jun 13, 2026, 12:34:31 AM","baseScore":0.0,"references":"https://github.com/openclaw/openclaw/security/advisories/GHSA-2j8v-hwgc-x698\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-53822\nhttps://www.vulncheck.com/advisories/openclaw-command-argument-modification-via-shell-wrapper-between-approval-and-execution\n","enisa_id":"EUVD-2026-36610\n","aliases":"CVE-2026-53822\nGHSA-8v2r-mv47-wxfr\n","epss":0.0,"dataProcessed":"Nov 9, 2026, 3:49:06 PM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"6718612c-6265-37f3-80be-64961fc289ea","advisory":{"id":"WID-SEC-W-2026-1738","description":"OpenClaw: Mehrere Schwachstellen","summary":"Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um Sicherheitsmechanismen zu umgehen, erhöhte Berechtigungen zu erlangen, Informationen offenzulegen, Konfigurationen zu manipulieren, beliebige Befehle oder Code auszuführen sowie interne Systeme über SSRF anzugreifen.","datePublished":"May 28, 2026, 10:00:00 PM","dateUpdated":"Jun 16, 2026, 10:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1738.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2026-1738\n","aliases":"CVE-2026-32906\nCVE-2026-34507\nCVE-2026-35630\nCVE-2026-35673\nCVE-2026-35674\nCVE-2026-53806\nCVE-2026-53807\nCVE-2026-53808\nCVE-2026-53809\nCVE-2026-53810\nCVE-2026-53811\nCVE-2026-53812\nCVE-2026-53813\nCVE-2026-53814\nCVE-2026-53815\nCVE-2026-53816\nCVE-2026-53817\nCVE-2026-53818\nCVE-2026-53819\nCVE-2026-53820\nCVE-2026-53821\nCVE-2026-53822\nCVE-2026-53823\nCVE-2026-53824\nCVE-2026-53825\nCVE-2026-53826\nCVE-2026-53827\nCVE-2026-53828\nCVE-2026-53829\nCVE-2026-53831\nCVE-2026-53832\nCVE-2026-53833\nCVE-2026-53834\nCVE-2026-53835\nCVE-2026-53837\nCVE-2026-53838\nCVE-2026-53839\nCVE-2026-53840\nCVE-2026-53841\nCVE-2026-53842\nCVE-2026-53843\nCVE-2026-53844\nCVE-2026-53845\nCVE-2026-53846\nCVE-2026-53847\nCVE-2026-53848\nCVE-2026-53849\nCVE-2026-53850\nCVE-2026-53851\nCVE-2026-53852\nCVE-2026-53853\nCVE-2026-53854\nCVE-2026-53855\nCVE-2026-53856\nCVE-2026-53857\nCVE-2026-53858\nCVE-2026-53859\nCVE-2026-53860\nCVE-2026-53861\nCVE-2026-53862\nCVE-2026-53863\nCVE-2026-53864\nCVE-2026-53865\nCVE-2026-53866\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"445b3783-839b-3dbc-b20a-1cddd78c32e1","product":{"name":"Open Source OpenClaw","vendor":{"name":"open source"}}}]}}]}