https://advisories.gitlab.com/npm/openclaw/CVE-2026-32003/
OpenClaw has system.run shell-wrapper env injection via SHELLOPTS/PS4 can bypass allowlist intent...
CVE-2026-32003 OpenClaw has system.run shell-wrapper env injection via SHELLOPTS/PS4 can bypass allowlist intent (RCE): system.run allowed SHELLOPTS + PS4...