A vulnerability was found in OpenClaw up to 2026.4.9. It has been declared as problematic. Affected by this issue is the function
validateScriptFileForShellBleed. The manipulation results in time-of-check time-of-use.
This vulnerability is cataloged as CVE-2026-43529. The attack must be initiated from a local position. There is no exploit available.
It is recommended to upgrade the affected component.
