| Package | Affected versions | Patched versions |
|---|---|---|
| openclaw | < 2026.6.6 | 2026.6.6 |
OpenClaw versions before 2026.6.6 contain an environment variable filtering vulnerability in host exec that fails to properly sanitize rustup startup variables. Attackers with lower-trust caller access or configured input paths can execute or persist actions beyond their intended authorization level.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free