一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月4日

CVE-2026-53822 [HIGH] – OpenClaw before 2026.5.18 contains a command injection vulnerability where shell wrapper a

未分类
📑 文章目录

OpenClaw before 2026.5.18 contains a command injection vulnerability where shell wrapper argv could change between approval and execution. Attackers can rebuild command arguments after allowlist approval to execute unapproved command shapes, potentially bypassing security controls.