CVE-2026-53832
HighCVSS 7.7Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
OpenClaw before version 2026.5.18 contains an identity header validation vulnerability allowing local same-host callers to forge trusted-proxy identity headers. Attackers with access to the proxy-facing Gateway port can supply forged identity headers to assume operator identity and potentially escalate privileges.
Risk Assessment
This vulnerability poses a risk of privilege escalation for attackers who can gain access to the system as operators, potentially leading to serious security breaches within the organization.
Recommendation
It is recommended to update OpenClaw to version 2026.5.18 or later to mitigate this vulnerability and to restrict access to the proxy-facing Gateway port.
Original NVD description (English source)
OpenClaw before 2026.5.18 contains an identity header validation vulnerability allowing local same-host callers to forge trusted-proxy identity headers. Attackers with access to the proxy-facing Gateway port can supply forged identity headers to assume operator identity and potentially escalate privileges.