GHSA-mc68-q9jw-2h3v: Command injection in clawdbot docker execution via PATH environment variable

Note

Official advisory for CVE-2026-24763: authenticated command injection (CWE-78) via unsafe PATH handling in Docker sandbox execution, unrelated to the skill directory