Skip to content

OpenClaw's shell env fallback trusts unvalidated SHELL path from host environment

High severity GitHub Reviewed Published Feb 23, 2026 in openclaw/openclaw • Updated Mar 25, 2026

No closed alerts for this advisory

Give feedback on Dependabot alerts