OpenClaw before 2026.5.12 contains an allowlist bypass vulnerability in shell inline-command parsing that allows authenticated operators to execute unapproved commands. A command request using shell inline-command forms could route through a parser case missing the expected allowlist decision, enabling shell content execution without intended approval prompts.
| Vendor | Product | Versions |
|---|---|---|
| OpenClaw | OpenClaw | npm/openclaw: <= 2026.5.10-beta.1 |
Updated vendor and product information, changed severity to CRITICAL, and added affected version 2026.5.11 with a patch available at 2026.5.12.
Initial creation
