sandbox-escape

OpenClaw WhatsApp Flaw: Three GHSA Bugs Turn One Message Into Host RCE

Three GHSA-tracked flaws in OpenClaw's WhatsApp integration let a single message trigger full host code execution; all fixed in version 2026.6.6.