OpenClaw < 2026.5.18 - Command Argument Modification via Shell Wrapper Between Approval and Execution

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2026-53822 · CVE overview and exploitation status

EUVD-2026-36610

GHSA-8v2r-mv47-wxfr

GHSA-2j8v-hwgc-x698

cve-program · CVE-2026-53822

• https://github.com/openclaw/openclaw/security/advisories/GHSA-2j8v-hwgc-x698
• https://www.vulncheck.com/advisories/openclaw-command-argument-modification-via-shell-wrapper-between-approval-and-execution

euvd · EUVD-2026-36610

• https://github.com/openclaw/openclaw/security/advisories/GHSA-2j8v-hwgc-x698
• https://www.vulncheck.com/advisories/openclaw-command-argument-modification-via-shell-wrapper-between-approval-and-execution

nvd · CVE-2026-53822

• https://github.com/openclaw/openclaw/security/advisories/GHSA-2j8v-hwgc-x698
• https://www.vulncheck.com/advisories/openclaw-command-argument-modification-via-shell-wrapper-between-approval-and-execution

osv · GHSA-2j8v-hwgc-x698

• https://github.com/openclaw/openclaw/security/advisories/GHSA-2j8v-hwgc-x698
• https://github.com/openclaw/openclaw

• OpenClaw before 2026.5.18 contains a command injection vulnerability where shell wrapper argv could change between approval and execution. Attackers can rebuild command arguments after allowlist approval to execute unapproved command shapes… · Advisory content revised · 11 Nov 2026