[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"public-cve-CVE-2026-53813":3,"news-by-cve-CVE-2026-53813-10":57},{"sectors":4,"attack_techniques":6,"source_identifier":14,"assigner_short_name":15,"cvss_score":16,"cvss_version":17,"cvss_vector":18,"nvd_cvss_vector":18,"kev_ransomware_use":19,"has_solution":19,"has_workaround":19,"vendor_context":20,"tags":28,"attack_tactics":29,"references_preview":30,"sources":36,"has_ai_summary":19,"has_attack_graph":38,"id":39,"date_published":40,"cvss_severity":41,"remediation_summary":42,"date_updated":43,"nuclei_template_count":44,"affected_products_preview":45,"has_exploit":19,"exploit_count":44,"attack_technique_count":49,"reference_count":50,"has_nuclei_templates":19,"state":51,"assigner_org":15,"nvd_cvss_severity":41,"title":52,"nvd_cvss_score":16,"description":53,"weaknesses":54,"cvss_source":33,"in_kev":19,"affected_product_count":49},[5],"security-products",[7],{"technique_id":8,"technique_name":9,"tactic":10,"tactic_name":11,"url":12,"confidence":13},"T1574","Hijack Execution Flow","persistence","Persistence","https://attack.mitre.org/techniques/T1574/","high","83251b91-4cc7-4094-a5c7-464a1b83ea10","",7.8,"3.1","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",false,[21],{"aliases":22,"sector":5,"subsector":25,"vendor":26,"vendor_type":27},[23,24],"crabbox","clawdbot","endpoint-av-edr","openclaw","oss-project",[],[11],[31,34],{"url":32,"source":33},"https://github.com/openclaw/openclaw/security/advisories/GHSA-v8cx-933x-r976","nvd",{"url":35,"source":33},"https://www.vulncheck.com/advisories/openclaw-arbitrary-artifact-loading-via-fake-package-root-resolution",[37,33],"cvelist",true,"CVE-2026-53813","2026-06-11T20:08:11Z","HIGH",{"has_workaround":19,"has_patch":19},"2026-06-11T21:16:23Z",0,[46],{"deployment":47,"vendor":48,"product":48,"sector":5,"subsector":25},"embedded","OpenClaw",1,2,"PUBLISHED","OpenClaw \u003C 2026.4.25 - Arbitrary Artifact Loading via Fake Package Root Resolution","OpenClaw before 2026.4.25 contains a path traversal vulnerability in memory-core artifact loading where workspace state influences local package root resolution. Attackers with access to affected workspaces can load memory-core artifacts from unintended local locations, potentially executing malicious code or accessing sensitive data.",[55],{"cwe_id":56,"name":15},"CWE-427",{"cve_id":39,"items":58,"total":44},[]]