The vulnerability allows an attacker with access to a trusted operator workspace to override the Homebrew executable that is used during skill install flows. By manipulating the workspace .env file, the attacker can cause an unintended Homebrew-compatible executable to be executed. The weakness is classified as CWE-426 – Untrusted Search Path, enabling the execution of arbitrary code without proper validation of the executable path, potentially leading to complete system compromise.

Products affected are OpenClaw (OpenClaw:OpenClaw) versions earlier than 2026.5.27. Any installation using an older version that relies on the aforementioned skill install mechanism is vulnerable.

The CVSS score of 8.7 indicates a high severity of impact. EPSS data is not available, so the precise likelihood of exploitation is uncertain. The vulnerability is not listed in CISA KEV, indicating no known exploitation in the wild yet. The likely attack vector involves an attacker who can gain authenticated access to a trusted operator's workspace and modify its .env file, a scenario common in internal environments or where credentials are compromised.