CVE-2026-53819

The flaw

OpenClaw before 2026.5.27 contains an arbitrary code execution vulnerability in skill install flows where workspace .env files can override the Homebrew executable selection. Attackers with access to trusted operator workspaces can execute

What to do

Review advisory and patch per vendor guidance.

References