tocsin

CVE-2026-53826

1 advisory.

npm/openclaw CVE-2026-53826: medium, EPSS 0.32%

OpenClaw: Sandboxed session spawn could expose the real workspace path to child prompts

Action: Upgrade openclaw to 2026.4.26 or later.

npm i openclaw@2026.4.26

Affected

introducedfixedlast affected
02026.4.26-

Fixed versions

2026.4.26

Sources

CVE-2026-53826 · published · modified · JSON