NPM: OpenClaw: Bundle MCP loopback could miss its exec denylist on session spawn

NPM: OpenClaw: Bundle MCP loopback could miss its exec denylist on session spawn vulnerability discovered by ? in WordPress Npm openclaw versions 2026.5.12...