CVE-2026-22168 | OpenClaw up to 2026.2.20 argument injection (GHSA-5v6x-rfc3-7qfr)

A vulnerability labeled as critical has been found in OpenClaw up to 2026.2.20. Affected by this vulnerability is an unknown functionality. Such manipulation leads to argument injection.

This vulnerability is traded as CVE-2026-22168. The attack may be launched remotely. There is no exploit available.

The affected component should be upgraded.