PT-2026-49768 · Openclaw · Openclaw

Edward-X · CVE-2026-53851 · Published 2026-06-16 · Updated 2026-06-18

Positive Technologies (AI Summary)

CVSS v4.0

6.3

Medium

Base vector

AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.5.12

Description A notification bypass allows Slack reaction events to enter the agent pipeline even when reaction notifications are disabled. This can trigger unintended agent processing for reaction events, potentially leading to the unauthorized processing of lower-trust input. This issue occurs when the affected feature is enabled and reachable.

Recommendations Update to version 2026.5.12. Disable or restrict Slack reaction event subscriptions if this path is not required. Disable the affected feature when it is not needed. Keep channel and tool allowlists narrow and avoid sharing one Gateway between mutually untrusted users.

Exploit

Fix

Improper Authorization

Missing Authorization

Weakness Enumeration

CWE-285

CWE-862

Related Identifiers

CVE-2026-53851

GHSA-C8W7-9W9H-X69Q

GHSA-FCVX-5CXC-V5P8

Affected Products

Openclaw

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53851.json · Exploit
• https://github.com/openclaw/openclaw/security/advisories/GHSA-fcvx-5cxc-v5p8 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-fcvx-5cxc-v5p8 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-53851 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-53851 · Security Note
• https://osv.dev/vulnerability/GHSA-c8w7-9w9h-x69q · Vendor Advisory
• https://github.com/openclaw/openclaw · Note
• https://t.me/cveNotify/168756 · Telegram Post
• https://vulncheck.com/advisories/openclaw-slack-reaction-event-notification-bypass · Note