OpenClaw: Workspace-derived service PATH could influence trash command selection (CVE-2026-53865) | HOL Guard CVE