CVE-2026-26323

OpenClaw is a personal AI assistant. Versions 2026.1.8 through 2026.2.13 have a command injection in the maintainer/dev script "scripts/update-clawtributors.ts". The issue affects contributors/maintainers or CI who run "bun scripts/update-clawtributors.ts" in a source checkout that contains a...