OpenClaw's shell env fallback trusts unvalidated SHELL path from host environment
Moderate severity
GitHub Reviewed
Published
Feb 23, 2026
in
openclaw/openclaw
•
Updated Mar 19, 2026
Give feedback on Dependabot alerts