CVE Alert: CVE-2026-45004 - OpenClaw - OpenClaw - RedPacket Security

OpenClaw before 2026.4.23 contains an arbitrary code execution vulnerability in the bundled plugin setup resolver that loads setup-api.js from process.cwd()