PT-2026-49764 · Openclaw · Openclaw

Keensecuritylab + 1 · CVE-2026-53847 · Published 2026-06-16 · Updated 2026-06-18

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.5.6

Description Insufficient scope validation in the Active Memory write scope allows Gateway operators with operator.write access to modify global configuration. This privilege escalation enables users to apply unauthorized configuration changes without requiring operator.admin privileges.

Recommendations Update to version 2026.5.6. Limit Active Memory write access to trusted operators. Keep channel and tool allowlists narrow. Avoid sharing one Gateway between mutually untrusted users. Disable the Active Memory write feature when it is not needed.

Exploit

Fix

LPE

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

CVE-2026-53847

GHSA-58WC-8WRV-XP9J

GHSA-X629-46CC-7XGW

Affected Products

Openclaw

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53847.json · Exploit
• https://github.com/openclaw/openclaw/security/advisories/GHSA-x629-46cc-7xgw · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-58wc-8wrv-xp9j · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-x629-46cc-7xgw · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-53847 · Security Note
• https://osv.dev/vulnerability/CVE-2026-53847 · Vendor Advisory
• https://github.com/openclaw/openclaw · Note
• https://t.me/cveNotify/168877 · Telegram Post
• https://vulncheck.com/advisories/openclaw-privilege-escalation-via-active-memory-write-scope · Note
• https://t.me/cveNotify/168752 · Telegram Post