None
Jun 16, 2026
Jun 16, 2026
Jun 16, 2026
Jun 16, 2026
None
Jun 16, 2026
Jun 16, 2026
Jun 16, 2026
Jun 16, 2026
None
Jun 16, 2026
Jun 16, 2026
Jun 16, 2026
Jun 16, 2026
None
Jun 16, 2026
Jun 16, 2026
Jun 16, 2026
Jun 16, 2026
None
Jun 16, 2026
Jun 16, 2026
Jun 16, 2026
Jun 16, 2026
None
Jun 16, 2026
Jun 16, 2026
Jun 16, 2026
Jun 16, 2026
None
Jun 16, 2026
Jun 16, 2026
Jun 16, 2026
Jun 16, 2026
None
Jun 16, 2026
Jun 16, 2026
Jun 16, 2026
Jun 16, 2026
None
Jun 16, 2026
Jun 16, 2026
Jun 16, 2026
Jun 16, 2026
None
Jun 16, 2026
Jun 16, 2026
Jun 16, 2026
Jun 16, 2026
None
Jun 16, 2026
Jun 16, 2026
Jun 16, 2026
Jun 16, 2026
None
Jun 16, 2026
Jun 16, 2026
Jun 16, 2026
Jun 16, 2026
None
Jun 16, 2026
Jun 16, 2026
Jun 16, 2026
Jun 16, 2026
None
Jun 16, 2026
Jun 16, 2026
Jun 16, 2026
Jun 16, 2026
None
Jun 16, 2026
Jun 16, 2026
Jun 16, 2026
Jun 16, 2026
None
Jun 16, 2026
Jun 16, 2026
Jun 16, 2026
Jun 16, 2026
None
Jun 16, 2026
Jun 16, 2026
Jun 16, 2026
Jun 16, 2026
CVE-2026-53866
— OpenClaw < 2026.5.12 - Allowlist Bypass in Shell Inline-Command Parsing
OpenClaw before 2026.5.12 contains an allowlist bypass vulnerability in shell inline-command parsing that allows authenticated operators to execute unapproved commands. A command request using shell …
Jun 16, 2026
Jun 16, 2026
Jun 16, 2026
Jun 16, 2026
CVE-2026-53865
— OpenClaw < 2026.5.2 - Arbitrary Command Execution via Workspace-Derived Service PATH
OpenClaw before 2026.5.2 contains a path traversal vulnerability in maintenance task execution that allows workspace-derived service paths to influence trash command selection. Attackers can execute …
Jun 16, 2026
Jun 16, 2026
Jun 16, 2026
Jun 16, 2026
CVE-2026-53864
— OpenClaw < 2026.5.26 - Insufficient Environment Variable Sanitization in Node.js Control …
OpenClaw before 2026.5.26 contains an insufficient sanitization vulnerability in the host environment sanitizer that allows Node.js control variables to bypass validation. Attackers with access to wo…
Jun 16, 2026
Jun 16, 2026
Jun 16, 2026
Jun 16, 2026