High
OpenClaw < 2026.5.18 - Command Argument Modification via Shell Wrapper Between Approval and Execution
Type: advisorySources: OSV
OpenClaw before 2026.5.18 contains a command injection vulnerability where shell wrapper argv could change between approval and execution. Attackers can rebuild command arguments after allowlist approval to execute unapproved command shapes, potentially bypassing security controls.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2026-53822
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 7 Nov 2026, 15:51 UTC · Revision 1
Source evidence
OpenClaw < 2026.5.18 - Command Argument Modification via Shell Wrapper Between Approval and Execution
core-osv · Original sourcePublished 12 Jun 2026, 21:56 UTC
OpenClaw before 2026.5.18 contains a command injection vulnerability where shell wrapper argv could change between approval and execution. Attackers can rebuild command arguments after allowlist approval to execute unapproved command shapes, potentially bypassing security controls.
osv:CVE-2026-53822
Complete source record
{
"id": "e6f2148c9d525f24725907cb050b1bba7c059beab696d7331844cdd0af4a644d",
"url": "https://osv.dev/vulnerability/CVE-2026-53822",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "OpenClaw < 2026.5.18 - Command Argument Modification via Shell Wrapper Between Approval and Execution",
"summary": "OpenClaw before 2026.5.18 contains a command injection vulnerability where shell wrapper argv could change between approval and execution. Attackers can rebuild command arguments after allowlist approval to execute unapproved command shapes, potentially bypassing security controls.",
"evidence": "osv:CVE-2026-53822",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2026-53822",
"aliases": [
"CVE-2026-53822",
"GHSA-2j8v-hwgc-x698"
],
"metrics": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/openclaw/openclaw",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "50a2481652b6a62d573ece3cead60400dc77020d"
}
],
"database_specific": {
"extracted_events": [
{
"range": [
{
"introduced": "0"
},
{
"fixed": "2026.5.18"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandardRange"
},
{
"cpe": "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "2026.5.18"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"v2026.5.18-beta.1",
"v2026.4.19-beta.2",
"v2026.4.19-beta.1",
"v2026.4.15",
"v2026.4.15-beta.2",
"v2026.4.15-beta.1",
"v2026.4.14",
"v2026.4.14-beta.1",
"v2026.4.12",
"v2026.4.12-beta.1",
"v2026.4.11",
"v2026.4.11-beta.1",
"v2026.4.10",
"v2026.4.9",
"v2026.4.9-beta.1",
"v2026.4.8",
"v2026.4.7-1",
"v2026.4.7",
"v2026.4.5",
"v2026.4.2",
"v2026.4.1",
"v2026.4.1-beta.1",
"v2026.3.31",
"v2026.3.31-beta.1",
"v2026.3.28",
"v2026.3.28-beta.1",
"v2026.3.24",
"v2026.3.24-beta.2",
"v2026.3.24-beta.1",
"v2026.3.23-2",
"v2026.3.23",
"v2026.3.23-beta.1",
"v2026.3.22",
"v2026.3.22-beta.1",
"v2026.3.13-1",
"v2026.3.13",
"v2026.3.12",
"v2026.3.11",
"v2026.3.11-beta.1",
"v2026.3.8",
"v2026.3.8-beta.1",
"v2026.3.7",
"v2026.3.7-beta.1",
"v2026.3.2-beta.1",
"v2026.3.2",
"v2026.3.1",
"v2026.2.26",
"v2026.2.26-beta.1",
"v2026.2.25",
"v2026.2.25-beta.1",
"v2026.2.24",
"v2026.2.24-beta.1",
"v2026.2.23",
"v2026.2.23-beta.1",
"v2026.2.22",
"v2026.2.22-beta.1",
"v2026.2.21",
"v2026.2.21-beta.1",
"v2026.2.19-beta.1",
"v2026.2.19",
"v2026.2.17",
"v2026.2.15-beta.1",
"v2026.2.14",
"v2026.2.13",
"v2026.2.12",
"v2026.2.9",
"v2026.2.6-3",
"v2026.2.6-2",
"v2026.2.6-1",
"v2026.2.6",
"v2026.2.3",
"v2026.2.2",
"v2026.2.1",
"v2026.1.30",
"v2026.1.29",
"v2026.1.24-1",
"v2026.1.24",
"v2026.1.23",
"v2026.1.22",
"v2026.1.21",
"v2026.1.20",
"v2026.1.16-2",
"v2026.1.15",
"v2026.1.14-1",
"v2026.1.13",
"v2026.1.12-2",
"v2026.1.12",
"v2026.1.11-3",
"v2026.1.11-2",
"v2026.1.11-1",
"v2026.1.11",
"v2026.1.10",
"v2026.1.9",
"v2026.1.8",
"v2026.1.5-3",
"v2026.1.5-2",
"v2026.1.5-1",
"v2026.1.5",
"v2.0.0-beta5",
"v2.0.0-beta4",
"v2.0.0-beta3",
"v2.0.0-beta2",
"v2.0.0-beta1",
"v1.3.0",
"v1.2.2",
"v1.2.1",
"v1.2.0",
"v1.1.0",
"v1.0.4",
"v0.1.3",
"v0.1.2",
"v0.1.1",
"v0.1.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53822.json"
}
}
],
"modified": "2026-10-28T02:30:51.288615752Z",
"provider": "osv",
"references": [
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53822.json",
"https://github.com/openclaw/openclaw/security/advisories/GHSA-2j8v-hwgc-x698",
"https://nvd.nist.gov/vuln/detail/CVE-2026-53822",
"https://www.vulncheck.com/advisories/openclaw-command-argument-modification-via-shell-wrapper-between-approval-and-execution",
"https://github.com/openclaw/openclaw"
],
"provider_metadata": {
"cwe_ids": [
"CWE-367"
],
"cna_assigner": "VulnCheck",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53822.json"
}
},
"related_cves": [
{
"value": "CVE-2026-53822",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 519796,
"published_at": "2026-06-12T21:56:50.258+00:00"
}