Vulnerabilities

TI-2026-38861 CVE-2026-53865 · GHSA-rx78-29qr-5hq8

OpenClaw < 2026.5.2 - Arbitrary Command Execution via Workspace-Derived Service PATH

LOW 32

OpenClaw before 2026.5.2 contains a path traversal vulnerability in maintenance task execution that allows workspace-derived service paths to influence trash command selection.

CVSS 4.0HIGH 7.2 Local Low privileges No interaction EPSS 0.00123 Published 2026-06-16 Fixed in 2026.5.2 CWE-426

TI-2026-38854 CVE-2026-53858 · GHSA-wc84-j36w-pw4x

OpenClaw < 2026.5.2 - Arbitrary Runtime Dependency Loading via STATE_DIRECTORY Environment Variable

LOW 32

OpenClaw before 2026.5.2 contains an environment variable injection vulnerability where workspace .env STATE_DIRECTORY could influence bundled runtime dependency roots.

CVSS 4.0HIGH 7.0 Local No auth User interaction EPSS 0.00124 Published 2026-06-16 Fixed in 2026.5.2 CWE-426

TI-2026-38838 CVE-2026-53842 · GHSA-fq9j-vw4w-fr6v

OpenClaw < 2026.5.2 - Arbitrary Python Runtime Execution via CLOUDSDK_PYTHON Environment Variable

LOW 32

OpenClaw before 2026.5.2 contains an environment variable injection vulnerability allowing workspace .env files to influence Python runtime selection through CLOUDSDK_PYTHON during Gmail setup gcloud execution.

CVSS 4.0HIGH 7.0 Local No auth User interaction EPSS 0.00133 Published 2026-06-16 Fixed in 2026.5.2 CWE-426

Vulnerabilities

Filters

OpenClaw < 2026.5.2 - Arbitrary Command Execution via Workspace-Derived Service PATH

OpenClaw < 2026.5.2 - Arbitrary Runtime Dependency Loading via STATE_DIRECTORY Environment Variable

OpenClaw < 2026.5.2 - Arbitrary Python Runtime Execution via CLOUDSDK_PYTHON Environment Variable