CVE-2026-62203 | BDVDB-2026-349281 Detail

Description#

OpenClaw versions before 2026.6.6 contain an environment variable filtering vulnerability in host exec that fails to properly sanitize rustup startup variables. Attackers with lower-trust caller access or configured input paths can execute or persist actions beyond their intended authorization level.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-07-17Record published in the CVE List.
2. Version 22026-07-29Most recent update recorded in the CVE List.