npm/openclaw CVE-2026-44115: high 8.8, EPSS 0.43%
OpenClaw's exec allowlist analysis rejects shell expansion in unquoted heredocs
Action: Upgrade openclaw to 2026.4.22 or later.
npm i openclaw@2026.4.22Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2026.4.22 | - |
Fixed versions
| 2026.4.22 |
Sources
- osv: GHSA-x3h8-jrgh-p8jx
- nvd: CVE-2026-44115
- https://github.com/openclaw/openclaw/security/advisories/GHSA-x3h8-jrgh-p8jx
- https://github.com/openclaw/openclaw/commit/b2e8b7d4bb2f22eaa16f5c4b07547774e90b65a5
- https://github.com/openclaw/openclaw
CVE-2026-44115 · published · modified · JSON