CVE-2026-53810: openclaw Marketplace Runtime Extension Metadata Code Injection

OpenClaw before 2026.5.18 trusts the runtime extension metadata bundled inside a marketplace package to locate the code it loads at runtime. That metadata is not independently verified against the entry points that were scanned during install review.

If a trusted operator installs a package whose metadata has been tampered with, or if a malicious publisher crafts that metadata deliberately, the runtime loads plugin code outside the reviewed entry points. Depending on operator configuration, lower-trust input paths may be able to trigger that load, achieving arbitrary code execution under the gateway process.