CVE-2026-53828

HighCVSS 8.8

Published: 12/06/2026(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

17th percentile - higher than 17% of all known CVEs

Summary

OpenClaw before version 2026.5.6 contains an authorization bypass vulnerability in native command handling that allows authenticated senders to execute owner-only commands without proper policy enforcement.

Risk Assessment

Attackers can exploit this vulnerability to bypass owner-command access control, potentially executing privileged commands from unauthorized users.

Recommendation

It is recommended to update OpenClaw to version 2026.5.6 or later to mitigate this authorization vulnerability.

Original NVD description (English source)

OpenClaw before 2026.5.6 contains an authorization bypass vulnerability in native command handling that allows authenticated senders to execute owner-only commands without proper policy enforcement. Attackers can trigger native command handling to bypass the configured owner-command access control, potentially executing privileged commands from unauthorized users.